Skip to content

Conversation

@Schmidor
Copy link

@Schmidor Schmidor commented Dec 8, 2025

CVE-2025-66566, CVE-2025-12183 were found in LZ4J 1.8.0

The official lz4-java project has been discontinued. A community fork was created at https://github.com/yawkat/lz4-java with new maven coordinates.

@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant