Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/13 9:54 p.m.10 views

GHSA-FFJ4-JQ7M-9G6V GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Summary GuardDog's safeextract function does not validate decompressed file sizes when extracting ZIP archives wheels, eggs, allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data...

7.1CVSS5.5AI score0.00438EPSS
SaveExploits1References4
Rows per page
Query Builder