github.com/klauspost/compress
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/klauspost/compresspage 1 of 1
- CVE-2026-116591HIGHCVSS 8.7EG 8.7fixed in 1.20.22026-10-26
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores…
- CVE-2026-63209HIGHCVSS 7.5EG 7.5fixed in 1.18.72026-09-29
compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat…
Check whether github.com/klauspost/compress is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/klauspost/compress CVEs against the assets you own.
Book a Demo →