How many CVEs does yawkat have?

yawkat has 8 published CVE records since 2025, including 8 in the last two years.

How many yawkat CVEs are in CISA KEV?

None of yawkat's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which yawkat products have the most CVEs?

The yawkat products with the most published CVEs are at.yawk.lz4:lz4-java, lz4-java, org.lz4:lz4-java, net.jpountz.lz4:lz4, org.lz4:lz4-pure-java.

What are the most common weakness types in yawkat CVEs?

yawkat's CVEs most often map to these CWE weakness types: CWE-789 (Memory Allocation with Excessive Size Value), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-125 (Out-of-bounds Read).

Are there public exploits for yawkat vulnerabilities?

No yawkat CVEs currently have a tracked public exploit in this dataset.

What is the average severity of yawkat CVEs?

The average CVSS base score across yawkat's scored CVEs is 6.3.

RadicalNotion.AI

Log in Create an account

8 CVEs

yawkat Vulnerabilities

Name: yawkat vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for yawkat.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.3

Avg CVSS

2025–2026

Overview

yawkat has 8 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

Security scorecard

A quick read on yawkat's vulnerability posture, as a share of its 8 published CVEs.

Average CVSS: 6.3
Critical / high: 38%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of yawkat's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium4

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of yawkat's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No yawkat CVEs currently have a tracked public exploit.

Most affected products

The yawkat products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in yawkat CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish yawkat CVE records.

Disclosure activity by year

How many yawkat CVEs were published each year.

2025

2

2026

6

Latest yawkat CVEs

The most recently disclosed vulnerabilities affecting yawkat.

yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryError
CWE-789
Medium · CVSS 5.3
EPSS 0.4%2026-10-06
yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream header
CWE-789
Medium · CVSS 5.3
EPSS 0.4%2026-10-06
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user
CWE-367
High · CVSS 7.3
EPSS 0.1%2026-10-06
yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs
CWE-770
Medium · CVSS 5.3
EPSS 0.4%2026-10-06
yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError
CWE-674
Low · CVSS 3.7
EPSS 0.3%2026-10-06
yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)
CWE-476
Medium · CVSS 6.5
EPSS 0.5%2026-08-18
yawkat LZ4 Java has a possible information leak in Java safe decompressor
CWE-201
High · CVSS 8.2
EPSS 0.6%2025-12-05
org.lz4:lz4-java - Out-of-Bounds Memory Access
CWE-125
High · CVSS 8.8
EPSS 0.7%2025-11-28

Get an alert for each new yawkat CVE, with AI-written analysis and remediation steps.

Monitor yawkat CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about yawkat vulnerabilities.

How many CVEs does yawkat have?: yawkat has 8 published CVE records since 2025, including 8 in the last two years.
How many yawkat CVEs are in CISA KEV?: None of yawkat's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which yawkat products have the most CVEs?: The yawkat products with the most published CVEs are at.yawk.lz4:lz4-java, lz4-java, org.lz4:lz4-java, net.jpountz.lz4:lz4, org.lz4:lz4-pure-java.
What are the most common weakness types in yawkat CVEs?: yawkat's CVEs most often map to these CWE weakness types: CWE-789 (Memory Allocation with Excessive Size Value), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-125 (Out-of-bounds Read).
Are there public exploits for yawkat vulnerabilities?: No yawkat CVEs currently have a tracked public exploit in this dataset.
What is the average severity of yawkat CVEs?: The average CVSS base score across yawkat's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track yawkat vulnerabilities

Get an alert for each new yawkat CVE, with AI-written analysis and remediation steps.

Create an account See pricing