X
Vendor security profile
xerial
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%40
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
3
2
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%20
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
8.7
CVE-2026-108106
Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service
X
Patch verifiedEPSS %0
6.3
CVE-2026-108104
Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream
X
Patch verifiedEPSS %0
8.7
CVE-2026-93452
snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress
X
Patch status unknownEPSS %1
6.9
CVE-2026-93451
snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods
X
Patch status unknownEPSS %1
8.7
CVE-2026-90559
snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress
X
Patch status unknownEPSS %1