← All credits
Yu Bao, PayPal Cyber Security Team
14 vulnerability records and advisories credit this contributor.
CVE-2026-87877
zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()
CVE-2026-87825
zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries
CVE-2026-87824
zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect
CVE-2026-87823
zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods