high7.5
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
18 matching advisories · 18 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
unknown
CVE-2026-111073
Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service
Apache Software Foundation · Apache Kafka
high7.5
medium5.9
medium6.9
EEF-CVE-2026-65627Fix available
Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2
medium6.5
high8.2
CVE-2026-97200
Unbounded response body buffering and decompression in hackney
benoitc · hackney / benoitc · hackney
high8.7
CVE-2026-109584
HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit
mtrudel · bandit / mtrudel · bandit
high7.1
CVE-2026-116175
vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions
vllm-project · vllm
high8.2
GHSA-h7wr-284f-5qvcFix available
Echo: Decompress permits unbounded gzip expansion in v4
medium4.3
medium6.8
CVE-2026-115396
Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive
NationalSecurityAgency · ghidra
high8.7
CVE-2026-93471
Unbounded SAML message decompression in esaml allows memory exhaustion
handnot2 · esaml / arekinath · esaml
medium6.5
high7.5
CVE-2026-114136
Django REST framework: JSONParser applies an attacker-named codec to the request stream
encode · django-rest-framework
medium6.2
CVE-2026-92823
Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml
Red Hat · Red Hat Enterprise Linux 10 / Red Hat · Red Hat Enterprise Linux 8
high7.5
CVE-2026-89059
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
Red Hat · RESTEasy / Red Hat · Red Hat build of Quarkus 3.27.6.redhat
medium5.9
CVE-2026-69304
ASP.NET Core Denial of Service Vulnerability
Microsoft · .NET 10.0 runtime / Microsoft · .NET 8.0 runtime