airlift aircompressor

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-67721< 3.4Aircompressor's Snappy and LZ4 Java-based decompressor implementation can leak information from reused output bufferMEDIUM 6.30.5 %
CVE-2024-36114< 0.27Decompressors can crash the JVM and leak memory content in AircompressorHIGH 8.60.5 %