Search: CVE-2026-54278

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.5%	CVE-2026-54278aio-libs aiohttp · Data Amplification Medium6.6EPSS 0.5%2026-06-22CVE Database V5CVE-2026-54278 ### Summary During cleanup it is possible for a compressed request body to be decompressed into memory in one chunk. ### Impact An attacker may be able to send a compressed payload in specific situations that could be decompressed into memory, potentially leading to DoS (a zip bomb edge case). ### Workaround Disable compression if unable to upgrade. ----- Patch: https://github.com/aio-libs/aiohttp/commit/4f7480e474cccc6a8cc2c92ad3f17a31dedf8232 EPSS 0.5%Vulnerability CWE-409 #brew-vdirsyncer-cve-2026-54278 #homebrew	CVE Database V5	2026-06-22

Page 1 of 1 · 2 duplicate CVE records merged