Klauspost vulnerabilities
We track 2 vulnerabilities in Klauspost products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Klauspost vulnerabilities
- 8.7 High severity
compress: Integer Overflow or Wraparound
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768.
- 7.5 High severity
compress: Integer Overflow or Wraparound
compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxI