org.lz4:lz4-java vulnerabilities (TuxCare)

3 vulnerabilities.

• org.lz4:lz4-java TuxCare yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI) CVE-2026-59949 Fix available 6.5 MediumJuly 24, 2026
• org.lz4:lz4-java TuxCare yawkat LZ4 Java has a possible information leak in Java safe decompressor CVE-2025-66566 Fix available 8.2 HighDecember 5, 2025
• org.lz4:lz4-java TuxCare org.lz4:lz4-java - Out-of-Bounds Memory Access CVE-2025-12183 Fix available 8.8 HighNovember 28, 2025