https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T13:00:50.955923+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109395 fkie_cve-2026-109395 2026-10-20T13:00:50.974944+00:00

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM heap memory into decompressed output or crash the JVM.

 https://db.gcve.eu/vuln/ghsa-7xjc-8h6q-2f5h GHSA-7xjc-8h6q-2f5h 2026-10-20T13:00:50.975007+00:00

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM heap memory into decompressed output or crash the JVM.