{"action":"Upgrade at.yawk.lz4:lz4-java to 1.8.1 or later.","affected":[{"fixed":"1.8.1","introduced":"0"}],"component":"at.yawk.lz4:lz4-java","cve_ids":["CVE-2025-12183"],"ecosystem":"Maven","epss":0.00747,"exploited":false,"fixed_versions":["1.8.1"],"ghsa_id":"GHSA-vqf4-7m7x-wgfc","id":"tcs_01M5N9EMQG60338C3NTMW5WKS5","modified_at":"2026-09-10T03:50:58.551985640Z","published_at":"2025-11-28T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-vqf4-7m7x-wgfc","https://nvd.nist.gov/vuln/detail/CVE-2025-12183","https://github.com/yawkat/lz4-java","https://github.com/yawkat/lz4-java/releases/tag/v1.8.1","https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183","https://www.sonatype.com/security-advisories/cve-2025-12183","http://www.openwall.com/lists/oss-security/2025/12/01/5"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-vqf4-7m7x-wgfc","url":"https://osv.dev/vulnerability/GHSA-vqf4-7m7x-wgfc"}],"summary":"LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS"}