org.lz4:lz4-pure-java vulnerabilities (Maven)

2 vulnerabilities.

• org.lz4:lz4-pure-java Maven yawkat LZ4 Java has a possible information leak in Java safe decompressor CVE-2025-66566 Fix available 8.2 HighDecember 5, 2025
• org.lz4:lz4-pure-java Maven org.lz4:lz4-java - Out-of-Bounds Memory Access CVE-2025-12183 Fix available 8.8 HighNovember 28, 2025