CPython gzip, tarfile, and zipfile CLIs can shadow stdlib (CVE-2026-115791)
Python's security list rates the flaw medium; the excerpt gives no fixed version or exploitation status.
Stories per day · 30 days
1 RSS
6 stories, newest first · one card per story
Stories tagged #gzip
CouchDB before 3.5.3 allows pre-auth gzip DoS (CVE-2026-90797)
Any remote client can exhaust memory through unlimited gzip decompression on POST /_session; 3.5.3 fixes it.
CVE-2026-92573: Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering
Authenticated producers can exhaust memory on Qpid Broker-J via unbounded GZIP decompression.
USN-8733-2: Gzip vulnerabilities
Ubuntu patches Gzip vulnerabilities (CVE-2026-41991) in USN-8733-2 for LTS versions, addressing insecure temp files and incorrect handling of compressed files.
Can gzip be a language model?
A developer shows gzip can continue text by beam-searching byte sequences that compress best against a primed corpus.
USN-8733-1: Gzip vulnerabilities
Ubuntu issued USN-8733-1 fixing two Gzip flaws: insecure gzexe temp files allowing file overwrites, and a crafted-file DoS/info exposure bug.