https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:10:29.711950+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-cn35932 CLEANSTART-2026-CN35932 — zstd-jni versions 1 2026-10-03T19:10:29.781512+00:00

Affected: CleanStart: kafka

Security vulnerability affects the kafka package. zstd-jni versions 1.

 https://cve.radiocsirt.org/vuln/euvd-2026-368639 EUVD-2026-368639 2026-10-03T19:10:29.781572+00:00 EUVD-2026-368639 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89045 fkie_cve-2026-89045 2026-10-03T19:10:29.781588+00:00

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.

 https://cve.radiocsirt.org/vuln/ghsa-r8cw-jvfx-h6x5 GHSA-r8cw-jvfx-h6x5 2026-10-03T19:10:29.781612+00:00

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-89045 UBUNTU-CVE-2026-89045 2026-10-03T19:10:29.781628+00:00

Affected: Ubuntu:24.04:LTS: zstd-jni-java, Ubuntu:26.04:LTS: zstd-jni-java

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.