Java

Everything RedTeam Monitor has reported about Java: 2 stories, newest first. Part of our Vulnerabilities coverage.

Ning compress-lzf CVE-2026-109395: Crafted Data Streams Crash JVMs and Leak Heap Memory Before 1.2.0

A high-severity flaw in Ning compress-lzf allows attackers to extract sensitive Java memory or crash systems using maliciously crafted data streams.

Oct 20, 2026

Vulnerabilities

Async-HTTP-Client users urged to patch CVE-2026-107282 to stop credential leaks during failover replays

A critical flaw in the popular Java HTTP client caused credentials to leak to incorrect servers during failover. Patches are now available for affected versions.

Oct 9, 2026