PT-2026-67809

Name of the Vulnerable Software and Affected Versions SnailJob version 1.7.0 Description An authenticated attacker can cause a denial of service by supplying a crafted Zstandard-compressed payload to the FuryUtil.deserialize helper. By inflating the frame content size field in the frame header an...

CVE-2026-69702: Memory Allocation with Excessive Size Value

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...