Lucene search
+L

21 matches found

OSV
OSV
added 2026/06/26 5:2 p.m.7 views

GHSA-XV9W-7V6Q-HPJH fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`

The fluent-plugin-s3 plugin specifically the ins3 input plugin supports reading and decompressing heavily compressed files such as gzip, lzma2, and lzop from Amazon S3. It was discovered that the plugin read the entire decompressed payload into memory at once without enforcing a strict size limit...

2.7CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder