Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/13 8:56 p.m.7 views

GHSA-J47W-4G3G-C36V file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry

Summary A crafted ZIP file can trigger excessive memory growth during type detection in file-type when using fileTypeFromBuffer, fileTypeFromBlob, or fileTypeFromFile. In affected versions, the ZIP inflate output limit is enforced for stream-based detection, but not for known-size inputs. As a...

5.3CVSS5.9AI score0.00299EPSS
SaveExploits1References6
Rows per page
Query Builder