CVE-2026-84161

CodeChecker 6.29.0 is vulnerable to an authenticated remote denial of service (DoS) due to unbounded zlib decompression in the storeAnalysisStatistics Thrift-over-HTTP method. If an operator enables store.analysis_statistics_dir , a network client with PRODUCT_STORE permissions can provide an att...