Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/20 9:52 p.m.8 views

GHSA-23HP-3JRH-7FPW node-tar: Decompression/parse DoS via unlimited input

Summary A Decompression/parse DoS via unlimited input vulnerability in node-tar allows an attacker to exhaust server resources disk space and CPU. Because the library does not enforce hard upper bounds on total decompressed data or entry counts, a small, maliciously crafted "Gzip Bomb" can be use...

9.2CVSS5.4AI score0.00424EPSS
SaveExploits1References5
Rows per page
Query Builder