ECHO-9602-f49c-093f
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-9602-f49c-093f.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-9602-f49c-093f
- Upstream
- CVE-2026-108104
- GHSA-2xrm-qggp-hr4m
- Published
- 2026-10-22T07:45:58Z
- Modified
- 2026-10-22T08:15:05Z
- Summary
- [none]
- Details
- References
-
- https://advisory.echohq.com/cve/CVE-2026-108104
- https://github.com/xerial/snappy-java/security/advisories/GHSA-c73m-r934-8qvg
- https://nvd.nist.gov/vuln/detail/CVE-2026-108104
- https://github.com/xerial/snappy-java/commit/139a53090a6662298924fd75d21f4769b4a219ea
- https://github.com/xerial/snappy-java
- https://github.com/xerial/snappy-java/blob/v1.1.10.9/src/main/java/org/xerial/snappy/SnappyFramedInputStream.java#L243
- https://github.com/xerial/snappy-java/releases/tag/v1.1.10.10
- https://www.vulncheck.com/advisories/xerial-snappy-java-1.1.7.4-before-1.1.10.10-double-release-of-pooled-buffers-in-snappyframedinputstream
- https://github.com/advisories/GHSA-2xrm-qggp-hr4m