Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-0bfa-518c-ee16
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-0bfa-518c-ee16.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-0bfa-518c-ee16
Upstream
CVE-2026-108106
GHSA-94x4-5g3f-jjxp
Published
2026-10-22T07:45:58Z
Modified
2026-10-22T08:15:03Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-108106
https://github.com/xerial/snappy-java/security/advisories/GHSA-q233-g92q-qxp6
https://nvd.nist.gov/vuln/detail/CVE-2026-108106
https://github.com/xerial/snappy-java/commit/943c6043a292568575e8347af4507d015e802c75
https://github.com/xerial/snappy-java
https://github.com/xerial/snappy-java/blob/v1.1.10.8/src/main/java/org/xerial/snappy/Snappy.java#L517
https://github.com/xerial/snappy-java/releases/tag/v1.1.10.9
https://www.vulncheck.com/advisories/xerial-snappy-java-before-1.1.10.9-unbounded-memory-allocation-denial-of-service
https://github.com/advisories/GHSA-94x4-5g3f-jjxp
Affected packages
Echo:Maven
/
org.xerial.snappy:snappy-java
Package
Name
org.xerial.snappy:snappy-java
Purl
pkg:maven/org.xerial.snappy/snappy-java
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.1.10.8+echo.1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-0bfa-518c-ee16.json"
ECHO-0bfa-518c-ee16 - OSV