I think it's ok, +1 for replacing. On Wed, Dec 3, 2025 at 10:06 AM Haonan Hou <[email protected]> wrote:
> Hi, > > The org.lz4:lz4-java is no longer maintained[1] and there is a high risk > issue CVE-2025-12183. > A community fork[2] is available to fix these issues. I think we should > switch to the new one. > > [1] https://github.com/lz4/lz4/issues/1346 > [2] https://github.com/yawkat/lz4-java > > Best regarts, > Haonan >
