https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:23:53.831451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335633 EUVD-2026-335633 2026-10-06T02:23:53.888415+00:00 EUVD-2026-335633 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61455 fkie_cve-2026-61455 2026-10-06T02:23:53.888452+00:00

Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage resources.

 https://cve.radiocsirt.org/vuln/ghsa-jxpj-m582-7727 GHSA-jxpj-m582-7727 2026-10-06T02:23:53.888483+00:00

Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage resources.