Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/19 9:16 p.m.17 views

py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

Summary PackInfo.read uses an On^2 cumulative sum pattern where numstreams is read directly from the archive header. A crafted .7z archive with a large numstreams value causes excessive CPU consumption during SevenZipFile.init — no extraction is needed. A 50 KB archive takes 7 seconds of CPU time...

8.7CVSS5.8AI score0.0021EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder