Skip to content

xz vulnerabilities (Alpaquita)

3 vulnerabilities.

xz AlpaquitaXZ Utils: Buffer overflow in lzma_index_append()CVE-2026-34743Fix available1.7 LowApril 2, 2026
xz AlpaquitaXZ has a heap-use-after-free bug in threaded .xz decoderCVE-2025-31115Fix available8.7 HighApril 3, 2025
xz AlpaquitaXz: malicious code in distributed sourceCVE-2024-3094Public exploitFix availableEPSS 90.9%10.0 CriticalMarch 29, 2024