Hi, 

The org.lz4:lz4-java is no longer maintained[1] and there is a high risk issue 
CVE-2025-12183.
A community fork[2] is available to fix these issues. I think we should switch 
to the new one.

[1] https://github.com/lz4/lz4/issues/1346
[2] https://github.com/yawkat/lz4-java

Best regarts,
Haonan

Reply via email to