{"action":"Upgrade org.xerial.snappy:snappy-java to 1.1.10.1 or later.","affected":[{"fixed":"1.1.10.1","introduced":"0"}],"component":"org.xerial.snappy:snappy-java","cve_ids":["CVE-2023-34453"],"ecosystem":"Maven","epss":0.01707,"exploited":false,"fixed_versions":["1.1.10.1"],"ghsa_id":"GHSA-pqr6-cmr2-h8hf","id":"tcs_01M5N97X1FREA3ZWYRYDRCD7PE","modified_at":"2026-09-10T03:50:08.421776299Z","published_at":"2023-06-15T16:13:20Z","references":["https://osv.dev/vulnerability/GHSA-pqr6-cmr2-h8hf","https://github.com/xerial/snappy-java/security/advisories/GHSA-pqr6-cmr2-h8hf","https://nvd.nist.gov/vuln/detail/CVE-2023-34453","https://github.com/xerial/snappy-java/commit/820e2e074c58748b41dbd547f4edba9e108ad905","https://github.com/xerial/snappy-java","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/BitShuffle.java#L107","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/BitShuffle.java"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-pqr6-cmr2-h8hf","url":"https://osv.dev/vulnerability/GHSA-pqr6-cmr2-h8hf"}],"summary":"snappy-java's Integer Overflow vulnerability in shuffle leads to DoS"}