Threats Tagged 'ghsa-r8cw-jvfx-h6x5'

CVE-2026-89045 is a medium severity vulnerability in the zstd-jni library versions 1.4.8-4 through 1.5.7-13. It involves an infinite loop caused by failure to validate negative length parameters in the ZstdInputStreamNoFinalizer.read() method. This flaw allows attackers to cause the read method to spin indefinitely while holding a stream monitor, blocking other threads from accessing the stream.