org.lz4:lz4-java

v1.8.1Maven· Java

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the Maven registry · derived rules, not AI

How it scores

MaintenanceAging

PopularityUnknown

Security1 advisory

LicenseUnknown

DepsZero deps

Maintenance

Last published 6 months ago — check before adopting.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

No license declared.

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
yawkat LZ4 Java has a possible information leak in Java safe decompressor
GHSA-cmp6-m4wj-q63q Published 2025-12-05

Recent releases