CVE-2026-53430 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1

[
  {
    "collectionURL": "https://hex.pm",
    "cpes": [
      "cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.GRPC.Compressor.Gzip'",
      "'Elixir.GRPC.Message'"
    ],
    "packageName": "grpc",
    "packageURL": "pkg:hex/grpc",
    "product": "grpc",
    "programFiles": [
      "lib/grpc/compressor/gzip.ex",
      "lib/grpc/message.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.GRPC.Compressor.Gzip':decompress/1"
      },
      {
        "name": "'Elixir.GRPC.Message':from_data/2"
      }
    ],
    "repo": "https://github.com/elixir-grpc/grpc",
    "vendor": "elixir-grpc",
    "versions": [
      {
        "lessThan": "1.0.0",
        "status": "affected",
        "version": "0.4.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.GRPC.Compressor.Gzip'",
      "'Elixir.GRPC.Message'"
    ],
    "packageName": "elixir-grpc/grpc",
    "packageURL": "pkg:github/elixir-grpc/grpc",
    "product": "grpc",
    "programFiles": [
      "lib/grpc/compressor/gzip.ex",
      "lib/grpc/message.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.GRPC.Compressor.Gzip':decompress/1"
      },
      {
        "name": "'Elixir.GRPC.Message':from_data/2"
      }
    ],
    "repo": "https://github.com/elixir-grpc/grpc",
    "vendor": "elixir-grpc",
    "versions": [
      {
        "lessThan": "1afbab9d57d2a3e16ca9c62ffa4923338ea96cfc",
        "status": "affected",
        "version": "beae6800fc8baf126f3fe7107d86a50e105275ba",
        "versionType": "git"
      }
    ]
  }
]