SN
Product
snappy-java
10
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 7Medium 3Low 0
Watch
Add snappy-java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108106 | 7.5 | Oct 9 | Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service Affected: before 1.1.10.9 |
| CVE-2026-93452 | 7.5 | Sep 17 | snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress Affected: through 1.1.10.8 |
| CVE-2026-90559 | 7.5 | Sep 12 | snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress Affected: through 1.1.10.8 |
| CVE-2023-43642 | 7.5 | Sep 25 | snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google Affected: before 1.1.10.4 |
| CVE-2023-34455 | 7.5 | Jun 15 | snappy-java is a fast compressor/decompressor for Java Affected: before 1.1.10.1 |
| CVE-2023-34454 | 7.5 | Jun 15 | snappy-java is a fast compressor/decompressor for Java Affected: before 1.1.10.1 |
| CVE-2023-34453 | 7.5 | Jun 15 | snappy-java is a fast compressor/decompressor for Java Affected: before 1.1.10.1 |
| CVE-2026-93451 | 6.5 | Sep 17 | snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods Affected: through 1.1.10.8 |
| CVE-2026-116590 New | 5.9 | Oct 26 | snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite Affected: < 1.1.10.9 |
| CVE-2026-108104 | 4.8 | Oct 9 | Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream Affected: 1.1.7.4 before 1.1.10.10 |
Showing 10