Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
zstd-safe Heap buffer overflow in `CCtx::try_clone` on a multithreaded context Unknown 17 days ago 7 hours ago
zstd-safe Uninitialized memory exposed when streaming decompression of a legacy frame fails Unknown 17 days ago 7 hours ago
zstd-safe Double free in `DCtx::try_clone` Unknown 17 days ago 7 hours ago
zstd Data from an abandoned stream leaks into the next stream on a reused context Unknown 17 days ago 7 hours ago
zstd-safe Use-after-free with `CParameter::StableInBuffer` Unknown 17 days ago 7 hours ago
zstd-safe `Seekable` reads a NULL or out-of-bounds seek table Unknown 17 days ago 7 hours ago
zstd-safe `OutBuffer::around_pos` exposes uninitialized memory Unknown 17 days ago 7 hours ago
zstd-safe `Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end Unknown 17 days ago 7 hours ago
zstd-safe Use-after-free through `init_using_cdict` and `init_using_ddict` Unknown 17 days ago 7 hours ago
zstd-safe Use-after-free of a dictionary after a one-shot call on a context with an open stream Unknown 17 days ago 7 hours ago
zstd-safe Out-of-bounds read in `train_from_buffer` when sample sizes overflow Unknown 17 days ago 7 hours ago
zstd-safe Out-of-bounds read with an out-of-range `InBuffer::pos` Unknown 17 days ago 7 hours ago
zstd-safe Use-after-free when changing a multithreaded context with an unfinished frame Unknown 17 days ago 7 hours ago
github.com/klauspost/compress/zstd compress zstd: Panic on two-block frames High Risk 8.0 6 days ago 6 days ago
zstd Uninitialized memory exposed by `write::Decoder` on a corrupt legacy frame Unknown 17 days ago 7 days ago
zstd-sys WebAssembly allocator shim corrupts memory on allocation failure Unknown 17 days ago 7 days ago
zstd Out-of-bounds read when training a dictionary from inconsistent sample sizes Unknown 17 days ago 7 days ago
ruzstd Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM) High Risk 7.5 22 days ago 20 days ago
ruzstd `ruzstd` uninit and out-of-bounds memory reads Medium Risk 6.0 1 year ago 1 month ago
zstd zstd vulnerable to buffer overrun High Risk 7.5 3 years ago 4 months ago
github.com/facebook/zstd zstd vulnerable to buffer overrun High Risk 7.5 3 years ago 4 months ago
ruzstd `ruzstd` uninit and out-of-bounds memory reads Unknown 1 year ago 1 year ago
zstd-jni Malicious code in zstd-jni (npm) Unknown 1 year ago 1 year ago