yawkat has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 5.3 (medium). The most common weakness class is CWE-770 (4).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 5.3
Publish → KEV: —
Last 90 days: 4 prev 0

Weakness classes

Products

lz4-java 4

Follow yawkat:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

yawkat vulnerabilities

CVEs affecting yawkat, newest first. Open any entry for full detail, references, and exploit status.

4 CVEsRSS

CVE-2026-106449Low· 3.7

3w ago

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty LZ4Block by recursively calling refill(), allowing a lon…

▾ Sunlityawkat · lz4-javaEPSS 0.42%via NVD

CVE-2026-106450Medium· 5.3

3w ago

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-f…

▾ Sunlityawkat · lz4-javaEPSS 0.45%via NVD

CVE-2026-106452Medium· 5.3

3w ago

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block header is nonnegative but allocates a compressed-input buffer of…

▾ Sunlityawkat · lz4-javaEPSS 0.45%via NVD

CVE-2026-106453Medium· 5.3

3w ago

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before validating the compressed input, allowing a five-byte attac…

▾ Sunlityawkat · lz4-javaEPSS 0.37%via NVD