Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
WildFly can mishandle LZ4 compressed data
published 12 days ago
Summary
The LZ4 compression library used in WildFly may be forced to process specially crafted data, potentially leading to crashes or unexpected behavior. This could affect the stability of applications running on WildFly. Update WildFly to the latest version or apply the vendor's recommended patch to resolve the issue.
What to do
- Update cleanstart wildfly to version 41.0.1-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | wildfly |
< 41.0.1-r2 Fix: upgrade to 41.0.1-r2
|
Original advisory text
yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the wildfly package. yawkat LZ4 Java provides LZ4 compression for Java.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published24 Oct 2026
Updated24 Oct 2026
First seen24 Oct 2026
Sources
CLEANSTART-2026-GP35995 · OSV
Track software like this
Free during beta