Threats Tagged 'ghsa-xj79-6hh5-9w6q'

CVE-2026-15310 is a low-severity vulnerability in CPython where decompressing specially crafted zip files using bzip, LZMA, or Zstandard compression methods can lead to memory exhaustion. This occurs because Python may use an attacker-controlled size to pre-allocate memory during decompression. The vulnerability affects multiple CPython versions prior to specific patch releases. No known exploits are reported in the wild, and no patch information is provided in the input data.