Skip to content
OpenAdvisories

Vendor

airlift

2 known vulnerabilities.

Products

aircompressor 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-67721

    Aircompressor's Snappy and LZ4 Java-based decompressor implementation can leak information from reused output buffer

    Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. In versions 3.3 and below, incorrect handling of malformed data in Java-based decompressor implementations for Snappy and LZ4 allow remote attackers t…

    airlift aircompressor druid trino Wolfi Maven