Skip to content
OpenAdvisories

Package · Wolfi

debezium-connector-spanner-3.6

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-102554

    Denial of Service via Eager Array Allocation During Deserialization in Guava

    Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashS…

    Google Guava druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven
  • Medium 6.5
    CVE-2026-59949

    yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)

    yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance().hash32().hash(), XXHashFactory.nativeInstance().hash64…

    yawkat lz4-java druid thingsboard-tb-node Debian Ubuntu Wolfi Maven