18%
Total Score
critical
Unfit to use: Maven marks the package as deprecated and relocated to at.yawk.lz4.
The entire package is deprecated through Maven relocation, with at.yawk.lz4 named as the replacement. Package-level deprecation is a severe dependency risk even though releases remain available.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10115 lz4-java is vulnerable to Use of Unmaintained Third Party Components in versions 0.0.1 - 1.10.0. | 0.0.1 - 1.10.0 | High |
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.