VYPR

apk package

chainguard/garage-2.2

pkg:apk/chainguard/garage-2.2

Vulnerabilities (1)

  • CVE-2026-32829Mar 20, 2026
    affected < 2.2.0-r3fixed 2.2.0-r3

    lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library fails to properly val