Lucene search
+L

145 matches found

Cvelist
Cvelist
•added 2026/07/01 3:11 p.m.•63 views

CVE-2026-24264

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS0.00721EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/01 3:11 p.m.•17 views

CVE-2026-24264

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00721EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•43 views

PT-2026-54723

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highly compressed data. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00721EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/06/29 3:16 a.m.•23 views

CVE-2026-13523

A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file src/utils/baseencoding.c of the component ISOBMFF Parser. Executing a manipulation can lead to highly compressed data. The attack needs to be launched locally. The exploit has been made available to the...

4.8CVSS4.3AI score0.0016EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/29 1:30 a.m.•47 views

EUVD-2026-40020

A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file src/utils/baseencoding.c of the component ISOBMFF Parser. Executing a manipulation can lead to highly compressed data. The attack needs to be launched locally. The exploit has been made available to the...

4.8CVSS4.2AI score0.0016EPSS
SaveExploits0References8
Snyk
Snyk
•added 2026/06/26 4:35 p.m.•17 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the inhttp and inforward plugins when decompressing gzip-compressed data. An attacker can cause excessive memory consumption by sending a highly compressed payload that...

8.7CVSS8.1AI score0.0062EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/23 5:24 p.m.•20 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the Decompress operation in the Compression node. An attacker can cause the process to terminate and disrupt all workflows by sendi...

8.7CVSS5.8AI score0.00546EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/06/22 8:56 p.m.•37 views

urllib3: urllib3 Streaming API improperly handles highly compressed data

A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...

8.9CVSS6.7AI score0.00682EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/06/15 8:09 p.m.•51 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification during cleanup. An attacker can exhaust system memory by sending a specially crafted compressed payload that is decompressed into memory in a single chunk. Remediation Upgra...

8.7CVSS7.1AI score0.00493EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/10 1:13 a.m.•15 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.springframework.security:spring-security-saml2-service-provider is a security component for the Spring Framework. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the REDIRECT binding. An attacker can exhaust system...

8.7CVSS5.3AI score0.0046EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/08 3:20 p.m.•15 views

CVE-2026-49755

Improper Handling of Highly Compressed Data Data Amplification vulnerability in wojtekmach Req allows attacker-controlled HTTP servers to exhaust memory in a Req client via decompression-bomb response bodies. Req's default response pipeline includes Req.Steps.decodebody/1 and...

8.2CVSS5.8AI score0.007EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
•added 2026/05/29 7:18 p.m.•17 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the Batch.Decompress function. An attacker can cause excessive memory allocation on the receiving node by sending a specially crafted compressed P2P gossip payload,...

8.7CVSS8.2AI score0.0046EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/27 7:57 p.m.•18 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the DefaultDecompressHandle process. An attacker can cause the server to allocate excessive memory and terminate unexpectedly by sending specially crafted gzip-compresse...

8.2CVSS8.2AI score0.00507EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/27 7:57 p.m.•14 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the DefaultDecompressHandle process. An attacker can cause the server to allocate excessive memory and terminate unexpectedly by sending specially crafted gzip-compresse...

8.2CVSS8.2AI score0.00507EPSS
SaveExploits0References2
Redos
Redos
•added 2026/05/06 12:00 a.m.•22 views

ROS-20260506-73-0045

Vulnerability in erlang related to incorrect processing of highly compressed input data. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service...

6.9CVSS6.5AI score0.00669EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/04/29 1:26 p.m.•28 views

Important: Red Hat Security Advisory: python-urllib3 security update

An update for python-urllib3 is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.9CVSS6.6AI score0.00682EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/04/29 1:26 p.m.•28 views

urllib3: urllib3 Streaming API improperly handles highly compressed data

A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...

8.9CVSS6.7AI score0.00682EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/04/20 1:27 p.m.•16 views

Important: Red Hat Security Advisory: python-urllib3 security update

An update for python-urllib3 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.9CVSS6.6AI score0.00682EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/04/08 8:41 a.m.•50 views

Security Bulletin: High Resource Consumption Vulnerability in urllib3 Streaming API Due to Improper Handling of Highly Compressed Data (≤ v2.6.0) affects watsonx.data

Summary A vulnerability in the urllib3 Streaming API versions 1.0 through 2.6.0 allows highly compressed HTTP responses to be decompressed in a way that can consume excessive system resources. When processing compressed data e.g., gzip or brotli, the library may fully decompress a small input int...

8.9CVSS6.5AI score0.00682EPSS
SaveExploits1Affected Software1
Snyk
Snyk
•added 2026/03/26 6:35 p.m.•13 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the archive extraction process. An attacker can exhaust server memory by uploading specially crafted zip archives containing highly compressed entries. Remediation Upgrad...

7.1CVSS8.2AI score0.00436EPSS
SaveExploits0References2
Rows per page
Query Builder