CVE-2026-93471

Improper Handling of Highly Compressed Data Data Amplification in esamlbinding in dropbox esaml allows an unauthenticated attacker to exhaust server memory and crash the Erlang VM via a crafted compressed SAMLResponse. esamlbinding:decoderesponse/2 base64-decodes the attacker-supplied SAMLRespons...