967 matches found
Echo: Decompress permits unbounded gzip expansion in v4
Impact Echo v4's opt-in Decompress middleware exposed a gzip-decoded request stream without limiting its expanded size. A small compressed request could therefore produce a very large decoded body. Handlers that read or bind that body could consume excessive memory or CPU, and repeated or...
CVE-2026-101894
CVE-2026-101894 — @xhmikosr/decompress symlink-chain path traversal Python 3 PoC for CVE-2026-101894 — Node.js archive extraction in @xhmikosr/decompress and unmaintained decompress allows read/write outside the output directory via a chain of symlink entries. Bypass of CVE-2026-53486 hardening...
CVE-2026-113613
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
EUVD-2026-105091
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
CVE-2026-113613
FlexGet versions before 3.20.7 are vulnerable to a path traversal (Zip Slip) vulnerability within the decompress plugin . A remote attacker can exploit this by providing malicious zip or rar archives containing ../ sequences or absolute paths through a feed. This allows the attacker to write arbi...
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
PT-2026-118473
Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID: CVE-2026-113613 Vendor: Unknown Severity: Critical — CVSS 9.2 Product: Unknown Date: 2026-10-20 A critical vulnerability Path Traversal has been disclosed affecting Unknown. Patch immediately...
undici: undici: Denial of Service via unhandled exception in decompress interceptor
A flaw was found in undici. A remote malicious or compromised HTTP server can cause a Denial of Service DoS by sending a small compressed response that decompresses beyond configured size limits. Because undici fails to catch errors triggered by response handlers during decompression, an unhandle...
undici: undici: Denial of Service via unhandled exception in decompress interceptor
A flaw was found in undici. A remote malicious or compromised HTTP server can cause a Denial of Service DoS by sending a small compressed response that decompresses beyond configured size limits. Because undici fails to catch errors triggered by response handlers during decompression, an unhandle...
CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
Linux Distros Unpatched Vulnerability : CVE-2026-87029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed...
UBUNTU-CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
DEBIAN-CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
CVE-2026-87029
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
CVE-2026-87029 undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
CVE-2026-87029 undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...
CVE-2026-87029
The undici HTTP client library for Node.js (versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1 ) contains a flaw where the decompress interceptor fails to catch exceptions thrown from zlib stream event callbacks . While the engine handles synchronous throws, asynchronous throws from these ca...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are vulnerable to a Out-of-Bounds Read vulnerability in the nscrledecompressdata function. This vulnerability occurs because the function processes context-Planes without...