OSV security advisoryHigh
High advisory for org
ROOT-APP-MAVEN-CVE-2026-108106 · Reported 2 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
orgJava ecosystem
Advisory overview
Root has patched CVE-2026-108106 in the org.xerial.snappy:snappy-java package for Root:Maven. Multiple fixed versions available.
Affected packages and releases
Root:Maven / org.xerial.snappy:snappy-java
introduced: 0 · fixed: 1.1.10.5-aikido.1 · fixed: 1.1.10.8-aikido.1
Root:Maven / io.root.org.xerial.snappy:snappy-java
introduced: 0 · fixed: 1.1.10.5-root.io.1 · fixed: 1.1.10.8-root.io.1