Threats tagged 'brew-dstack-cve-2026-59939'

The httplib2 HTTP client library is vulnerable to a decompression bomb denial of service via unbounded gzip or deflate response handling. A malicious HTTP server can send a small compressed payload that decompresses into a very large memory allocation, causing the client to crash or be killed due to out-of-memory conditions. This affects any application using httplib2.Http().request() against untrusted endpoints. The vulnerability is fixed in version 0.20.27.