Lucene search
+L

15 matches found

osv_pysec
osv_pysec
•added 2026/10/15 10:22 a.m.•26 views

PYSEC-2026-4209 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

4.3CVSS5.7AI score0.00299EPSS
SaveExploits0References8
Rows per page
Query Builder