CVE-2026-18929

creationtimestamp| type| source ---|---|--- 2026-08-18 10:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gjxnd77d5wrgc 2026-08-18 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-18929...

CVE-2026-18929 Resource Exhaustion in Carbone

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...