Threats tagged 'brew-prowler-cve-2026-59939'

The httplib2 HTTP client library has a vulnerability in its handling of gzip and deflate compressed HTTP response bodies. It performs unbounded decompression without limits on the decompressed size, allowing a malicious server to send a small compressed payload that expands to a very large size in memory. This can cause the client process to run out of memory or crash due to MemoryError. The vulnerability affects any application using httplib2.Http().request() with untrusted HTTP endpoints. A fix is available in version 5.31.1_1.