https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:21:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335633 EUVD-2026-335633 https://cve.radiocsirt.org/vuln/euvd-2026-335633 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61455 <p>Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage resources.</p> <p>Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61455 https://cve.radiocsirt.org/vuln/ghsa-jxpj-m582-7727 <p>Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage resources.</p> <p>Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size, file count, and nesting depth. Attackers can supply a crafted ZIP archive that expands to fill available disk space, causing denial of service by exhausting storage resources.</p> https://cve.radiocsirt.org/vuln/ghsa-jxpj-m582-7727