CLEANSTART-2026-NN03772: yawkat LZ4 Java provides LZ4 compression for Java
CVE-2026-106449 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1 - Upgrade
Upgrade
cleanstart/strimzi-kafka-operatorto a version that resolves this vulnerability.Fixed in 1.3.0-r0
Event History
Frequently Asked Questions
Which deployments should be prioritized for review?
Review deployments of cleanstart/sonarqube and cleanstart/strimzi-kafka-operator, as these are the listed affected software packages. The advisory states that the underlying CVE affects multiple packages.
Does exploitation require authentication or user interaction?
The supplied vector indicates that no privileges and no user interaction are required. Exploitation is network-reachable, but the attack complexity is high.
What is the expected security impact?
The supplied severity data indicates a low severity score of 3.7. Confidentiality and integrity impact are listed as none, while availability impact is listed as low.