Skip to content
OpenAdvisories

Product · yawkat

lz4-java

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-106451 Public exploit

    yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

    yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream op…

    yawkat lz4-java org.lz4:lz4-java lz4-java Debian Ubuntu Maven