[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVYim4XtehCT7SOJtxQG1CTAzTyyNZw8rSC7fRkscLmQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":50,"topProductsByCves":51,"seoMetadata":53,"meta":62},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},32703,"tukaani",1,4,0,50,"2024-03-29","t",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},165720,"xz","Tukaani is a technology vendor with 1 tracked product and 4 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,29,36,43],{"cveId":22,"description":23,"publishedDate":13,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2024-3094","Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. \r\nThrough a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.",10,"v3.1","Critical",false,0.909,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":35},"CVE-2022-1271","An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.","2022-08-31",8.8,"High",0.05205,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":34,"isKev":27,"epssScore":42},"CVE-2015-4035","scripts\u002Fxzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name.","2017-07-25",7.8,"v3.0",0.0099,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":25,"severity":48,"isKev":27,"epssScore":49},"CVE-2020-22916","An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of \"endless output\" and \"denial of service\" because decompression of the 17,486 bytes always results in 114,881,179 bytes, which is often a reasonable size increase.","2023-08-22",5.5,"Medium",0.00249,[],[52],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":54,"metaDescription":55,"keywords":56,"structuredData":57},"Tukaani - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tukaani covering 1 product with 4 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tukaani vulnerabilities, Tukaani security, Tukaani CVE, Tukaani threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":58,"@type":59,"name":60,"description":55,"url":61},"https:\u002F\u002Fschema.org","Organization","Tukaani","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftukaani",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":63,"apiVersion":64},"2026-10-18T19:06:26.039Z","3.0"]