org.xerial.snappy:snappy-java vulnerabilities
CVEs whose affected-version data names the org.xerial.snappy:snappy-java package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-116590Medium· 5.9snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
▾ Sunlitxerial · org.xerial.snappy:snappy-javaEPSS 0.41%via GHSA
GHSA-94x4-5g3f-jjxpHigh· 7.5Duplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Duplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
▾ Twilightxerial · org.xerial.snappy:snappy-javavia GHSA
GHSA-wm36-87w8-wg22Medium· 6.5Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
▾ Sunlitxerial · org.xerial.snappy:snappy-javavia GHSA