usvg SVGZ decompression bomb in `Tree::from_data`
usvg automatically decompresses SVGZ in Tree::from_data, enabling a gzip decompression-bomb denial of service.
1 stories, newest first · one card per story
usvg automatically decompresses SVGZ in Tree::from_data, enabling a gzip decompression-bomb denial of service.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views