CVE-2026-69702

Name of the Vulnerable Software and Affected Versions SnailJob version 1.7.0

Description An authenticated attacker can cause a denial of service by supplying a crafted Zstandard-compressed payload to the FuryUtil.deserialize helper. By inflating the frame content size field in the frame header and storing a base64-encoded Zstandard payload with an arbitrarily large decompressed size in a retry task argument, the attacker can force the JVM to attempt an unbounded array allocation. This results in an unrecoverable java.lang.OutOfMemoryError when the task is processed through the retry-task pipeline, crashing the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.