#cwe-409

共收录 169 条相关情报。

← 返回所有主题
漏洞预警2026-06-02 发布INFO

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies. ...

CVE-2026-48594

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress (data/batch/...

CVE-2026-44697

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-

历史摘要 · 未重新核验 · NVD

安全公告2026-05-27 发布INFO

CrowdSec LAPI: Denial of Service via Unbounded Gzip Decompression

CVE-2026-44981

The LAPI router uses `gin-contrib/gzip` with `DefaultDecompressHandle` globally (`pkg/apiserver/controllers/controller.g

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-19 发布INFO

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metadata withou...

CVE-2026-8814

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amp

历史摘要 · 未重新核验 · NVD

安全公告2026-05-13 发布INFO

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines...

CVE-2026-43970

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticate

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticated remote denial of service via memory exhaustion. cow_sp...

CVE-2026-43970

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTP...

CVE-2026-44432

urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response in

历史摘要 · 未重新核验 · NVD

安全公告2026-05-13 发布INFO

Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload

CVE-2026-44697

## Summary A remote, unauthenticated denial-of-service vulnerability in `Batch.Decompress` (`data/batch/batch.go`) allo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-11 发布INFO

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint decompresses the details entry from an uploaded .audiobooksh...

CVE-2026-42886

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint dec

历史摘要 · 未重新核验 · NVD