Out-of-bounds read in train_from_buffer when sample sizes overflow
crates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 0.0.0-0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–29 of 29 matching · newest first
train_from_buffer when sample sizes overflowcrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 0.0.0-0, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
crates.io zstd-sys · Upgrade to 2.1.2 or later · >= 2.0.9, < 2.1.2
DCtx::try_clonecrates.io zstd-safe · Upgrade to 8.2.0 or 7.4.0 by release line · >= 4.1.4, < 7.4.0; >= 8.0.0-0, < 8.2.0 · amended
Bitnami gitlab · Upgrade to 19.4.2, 19.3.5 or 19.2.8 by release line · >= 19.2.0, < 19.2.8; >= 19.3.0, < 19.3.5; >= 19.4.0, < 19.4.2 · CVE-2026-97229 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.