Threats tagged 'brew-semgrep-cve-2024-5569'

CVE-2024-5569 is a Denial of Service (DoS) vulnerability in the jaraco/zipp library affecting all versions prior to 3.19.1. The flaw causes an infinite loop when processing specially crafted zip files via certain Path-related functions. This vulnerability also impacts the zipfile module in CPython due to shared code. The infinite loop prevents application responsiveness but does not exhaust resources. The issue is fixed in jaraco/zipp version 3.19.1.