https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:30:30 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-cn35932 <p><strong>Affected:</strong> CleanStart: kafka</p> <p>Security vulnerability affects the kafka package. zstd-jni versions 1.</p> <p><strong>Affected:</strong> CleanStart: kafka</p> <p>Security vulnerability affects the kafka package. zstd-jni versions 1.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cn35932 https://cve.radiocsirt.org/vuln/euvd-2026-368639 EUVD-2026-368639 https://cve.radiocsirt.org/vuln/euvd-2026-368639 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89045 <p>zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.</p> <p>zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-89045 https://cve.radiocsirt.org/vuln/ghsa-r8cw-jvfx-h6x5 <p>zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.</p> <p>zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.</p> https://cve.radiocsirt.org/vuln/ghsa-r8cw-jvfx-h6x5 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-89045 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: zstd-jni-java, Ubuntu:26.04:LTS: zstd-jni-java</p> <p>zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: zstd-jni-java, Ubuntu:26.04:LTS: zstd-jni-java</p> <p>zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-89045