[ Vendor · 3 CVEs ]
xerial
CVEs affecting xerial published in the last 30 days, plus any xerial CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108104 | 9 Oct 2026 | CVSS 4.8 | xerial snappy-javaXerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice… | |
| CVE-2026-108106 | 9 Oct 2026 | CVSS 7.5 | xerial snappy-javaXerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a… | |
| CVE-2026-90559 | 12 Sep 2026 | CVSS 7.5 | xerial snappy-javasnappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer… |