XZ
Product
xz
by tukaani-project · last CVE Apr 2, 2026
2
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add xz to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31115
8.7
1%
Apr 3
XZ has a heap-use-after-free bug in threaded .xz decoder
Affected: >= 5.3.3alpha, < 5.8.1
CVE-2026-34743
5.3
1%
Apr 2
XZ Utils: Buffer overflow in lzma_index_append()
Affected: < 5.8.3
Showing 2