tukaani-project xz

• CVE-2026-34743 Low 1.7 XZ Utils: Buffer overflow in lzma_index_append() 0.5%
• CVE-2025-31115 High 8.7 XZ has a heap-use-after-free bug in threaded .xz decoder 0.7%
• CVE-2024-47611 Medium 6.3 XZ Utils on Microsoft Windows platform are vulnerable to argument injection 0.8%