Aiohttp HTTP Client DoS

The vulnerability of the Aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261005-73-0096

The vulnerability in dotnet9.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261005-73-0097

The vulnerability in dotnet8.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261005-73-0098

The vulnerability in dotnet10.0 is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel cgroup_migrate_add_task Heap Buffer Overflow DoS

The vulnerability of the cgroupmigrateaddtask function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to incorrect handling of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-80631

CVE-2026-80631 affects the Linux kernel's btrfs LZO decompression path (lzo_decompress_bio() in fs/btrfs/lzo.c). The root cause is an insufficient validation check: each on-disk segment length (seg_len) is validated only against the workspace buffer size, not against the actual compressed input s...

thrift: Apache Thrift Python bindings: Denial of Service via data amplification

A flaw was found in Apache Thrift Python bindings. This vulnerability involves the improper handling of highly compressed data, leading to a data amplification issue. An attacker could exploit this by providing specially crafted compressed input, which may cause the application to consume excessi...

CVE-2026-41608

A flaw was found in Apache Thrift Python bindings. This vulnerability involves the improper handling of highly compressed data, leading to a data amplification issue. An attacker could exploit this by providing specially crafted compressed input, which may cause the application to consume excessi...

PhpSpreadsheet gzfileGetContents() DoS

The vulnerability of the gzfileGetContents method in the src/PhpSpreadsheet/Reader/Gnumeric.php script of the PhpSpreadsheet library is related to incorrect processing of highly compressed input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Urllib3 HTTP Response Processing Flow DoS

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2026-109450

Уязвимость HTTP-клиента Aiohttp связана с некорректной обработкой сильно сжатых входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PyPDF PDF Processing DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to improper processing of highly compressed input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

aiohttp HTTP Client DoS

The vulnerability of the aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Jwcrypto DoS

The vulnerability of the JavaScript library for cryptography, Jwcrypto, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PyPDF PDF Processing DoS

The vulnerability of the Python library for working with PDF files, PyPDF, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

OTP Library Compression DoS

The vulnerability of theOTP library in the Erlang programming language is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-016489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016489 advisory. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large...

ROS-20260506-73-0048

Vulnerability in python2-jwcrypto related to incorrect handling of highly compressed input data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260506-73-0047

Vulnerability in python-jwcrypto related to incorrect handling of highly compressed input data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260420-73-0019

Vulnerability in python-aiohttp related to incorrect handling of highly compressed input data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...