EUVD-2026-124145

Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/id.ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing...