5507 matches found
CVE-2026-75047
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
EUVD-2026-60246
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-75047
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-68762
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
CVE-2026-68762
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
CVE-2026-68762
JetBrains Ktor before 3.4.1 allows a remote attacker to trigger a denial-of-service condition through WebSocket decompression; CVSS 3.1 rates it MEDIUM (5.9). Upgrade to Ktor 3.4.1. No exploitation details are provided in the documents.
CVE-2026-68762
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
CVE-2026-68762
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
EUVD-2026-60242
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
BIT-NIFI-2026-68981 Apache NiFi: Uncontrolled Resource Consumption through Decompression of HTTP Requests
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted...
PT-2026-76691
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
CVE-2026-75047: Improper Handling of Highly Compressed Data (Data Amplification)
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
CVE-2026-68762: Loop with Unreachable Exit Condition
In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...
Unity Linux 20.1070e Security Update: gzip (UTSA-2026-099524)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099524 advisory. GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompressi...
PT-2026-76696
In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint...
OSV-2026-1157 Memcpy-param-overlap in zxc_decompress_chunk_wrapper_default
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546426939 Crash type: Memcpy-param-overlap Crash state: zxcdecompresschunkwrapperdefault zxcdecompressframe fuzzdecompress.c...
CVE-2026-74767
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...
CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...