https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 17:10:29 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-na65977 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra</p> <p>Package cassandra version 5.0.8-r1 fixes 42 vulnerabilities: ghsa-j3rv-43j4-c7qm, ghsa-rmj7-2vxq-3g9f, ghsa-5jmj-h7xm-6q6v, ghsa-3pjw-73gf-8qr5, ghsa-hgj6-7826-r7m5...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra</p> <p>Package cassandra version 5.0.8-r1 fixes 42 vulnerabilities: ghsa-j3rv-43j4-c7qm, ghsa-rmj7-2vxq-3g9f, ghsa-5jmj-h7xm-6q6v, ghsa-3pjw-73gf-8qr5, ghsa-hgj6-7826-r7m5...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-na65977 https://cve.radiocsirt.org/vuln/cve-2026-59949 <p><strong>Affected:</strong> yawkat lz4-java</p> <p>yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance().hash32().hash(), XXHashFactory.nativeInstance().hash64().hash(), XXHashFactory.nativeInstance().newStreamingHash32().update(), and XXHashFactory.nativeInstance().newStreamingHash64().update(), allowing null arrays or oversized ranges to reach native code, read outside the Java array, and fatally terminate the JVM. This issue is fixed in version 1.11.1.</p> <p><strong>Affected:</strong> yawkat lz4-java</p> <p>yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance().hash32().hash(), XXHashFactory.nativeInstance().hash64().hash(), XXHashFactory.nativeInstance().newStreamingHash32().update(), and XXHashFactory.nativeInstance().newStreamingHash64().update(), allowing null arrays or oversized ranges to reach native code, read outside the Java array, and fatally terminate the JVM. This issue is fixed in version 1.11.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-59949