lz4-java icon indicating copy to clipboard operation
lz4-java copied to clipboard

Published 20 hours ago • verified publisher icon lz4

Request for Update to Latest lz4 Version in lz4-java

Open vipi-n opened this issue 8 months ago • 1 comments

I wanted to inquire if there are any plans to update the lz4 version in the lz4-java project. Currently, version 1.8.0 of lz4-java uses lz4 version 1.9.2, which has known vulnerability: https://nvd.nist.gov/vuln/detail/cve-2021-3520

Would it be possible to update the project to use lz4 version 1.9.4 or above to address this concern.

vipi-n avatar Feb 13 '25 10:02 vipi-n