{"action":"Upgrade org.xerial.snappy:snappy-java to 1.1.10.1 or later.","affected":[{"fixed":"1.1.10.1","introduced":"0"}],"component":"org.xerial.snappy:snappy-java","cve_ids":["CVE-2023-34454"],"ecosystem":"Maven","epss":0.01469,"exploited":false,"fixed_versions":["1.1.10.1"],"ghsa_id":"GHSA-fjpj-2g6w-x25r","id":"tcs_01M5N8W6PY9S3BQPF3814APX1A","modified_at":"2026-09-10T03:50:02.338471653Z","published_at":"2023-06-15T16:28:08Z","references":["https://osv.dev/vulnerability/GHSA-fjpj-2g6w-x25r","https://github.com/xerial/snappy-java/security/advisories/GHSA-fjpj-2g6w-x25r","https://nvd.nist.gov/vuln/detail/CVE-2023-34454","https://github.com/xerial/snappy-java/commit/d0042551e4a3509a725038eb9b2ad1f683674d94","https://github.com/xerial/snappy-java","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L169","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L422","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/Snappy.java"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-fjpj-2g6w-x25r","url":"https://osv.dev/vulnerability/GHSA-fjpj-2g6w-x25r"}],"summary":"snappy-java's Integer Overflow vulnerability in compress leads to DoS"}