{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.0"}],"component":"org.lz4:lz4-pure-java","cve_ids":["CVE-2025-12183"],"ecosystem":"Maven","epss":0.00697,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vqf4-7m7x-wgfc","id":"tcs_01M5N9EN0X4ZNMMTX6GA4AFG6R","modified_at":"2026-09-10T03:50:58.551985640Z","published_at":"2025-11-28T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-vqf4-7m7x-wgfc","https://nvd.nist.gov/vuln/detail/CVE-2025-12183","https://github.com/yawkat/lz4-java","https://github.com/yawkat/lz4-java/releases/tag/v1.8.1","https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183","https://www.sonatype.com/security-advisories/cve-2025-12183","http://www.openwall.com/lists/oss-security/2025/12/01/5"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-vqf4-7m7x-wgfc#Maven/org.lz4:lz4-pure-java","url":"https://osv.dev/vulnerability/GHSA-vqf4-7m7x-wgfc"}],"summary":"LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS"}