https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:14:14.121427+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-55195 CVE-2026-55195 — py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size 2026-10-07T00:14:14.138228+00:00

Affected: miurahr py7zr

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress() extracted archive entries without tracking total decompressed size, allowing a crafted .7z file such as a 15.6 KB archive that expands to 100 MB to exhaust disk or memory before extraction completes. This issue is fixed in version 1.1.3.