Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
CGA-jgv5-q468-497g
published 7 days ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | logstash-9.3-iamguarded-compat | All versions |
| Wolfi | wolfi | logstash-9.3-iamguarded-compat | All versions |
Original advisory text
CGA-jgv5-q468-497g
References
- https://repo1.maven.org/maven2/org/xerial/snappy-java/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93451... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-93451 Vendor Advisory
- https://www.vulncheck.com/advisories/snappy-java-through-1.1.10.8-buffer-overflo... Vendor Advisory
- https://github.com/xerial/snappy-java/issues/729 Third Party Advisory
- https://github.com/xerial/snappy-java Product
- https://github.com/xerial/snappy-java/blob/v1.1.10.8/src/main/java/org/xerial/sn... Third Party Advisory
Severity
8.1
High
Timeline
Published28 Oct 2026
Updated30 Oct 2026
First seen28 Oct 2026
Sources
CGA-jgv5-q468-497g · OSV
Track software like this
Free during beta