Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/07/20 9:52 p.m.•22 views

GHSA-23HP-3JRH-7FPW node-tar: Decompression/parse DoS via unlimited input

Summary A Decompression/parse DoS via unlimited input vulnerability in node-tar allows an attacker to exhaust server resources disk space and CPU. Because the library does not enforce hard upper bounds on total decompressed data or entry counts, a small, maliciously crafted "Gzip Bomb" can be use...

9.2CVSS6.6AI score0.00582EPSS
SaveExploits1References5
Rows per page
Query Builder