Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/29 3:31 p.m.7 views

GHSA-H5QV-QJV4-PC5M Unfurl's unbounded zlib decompression allows decompression bomb DoS

Summary The compressed data parser uses zlib.decompress without a maximum output size. A small, highly compressed payload can expand to a very large output, causing memory exhaustion and denial of service. Details - unfurl/parsers/parsecompressed.py calls zlib.decompressdecoded with no size limit...

8.7CVSS5.9AI score0.00508EPSS
SaveExploits1References7
Rows per page
Query Builder