CWE-409.

CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources

• Denial of service
• CWE-409

>=1.4.9, <1.16.0 · fixed in 1.16.0

rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol

• smallnest rpcx
• CWE-409

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

• Denial of service
• CWE-409

>=2.17.0, <2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2

NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can…

• NVIDIA Triton Inference Server
• CWE-409

GPAC ISOBMFF base_encoding.c data amplification

• GPAC
• Denial of service
• CWE-409

Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion

• envoy
• CWE-409

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

• Denial of service
• CWE-409

<0.5.3 · fixed in 0.5.3

fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`

• Denial of service
• CWE-409

>=0.7.0, <1.8.5 · fixed in 1.8.5

Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

• CWE-409

<1.19.3 · fixed in 1.19.3

MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths

• Denial of service
• CWE-409

<2.5.301 || >=3.0, <3.1.7 · fixed in 2.5.301, 3.1.7

MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows

• Memory corruption
• Denial of service

>=3.0, <3.1.7 · fixed in 3.1.7

py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction size

• CWE-409

<1.1.3 · fixed in 1.1.3

Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification

• envoy
• Denial of service
• CWE-405

vLLM: OOM Denial of Service via Audio Decompression Bomb

• CWE-409

<0.24.0 · fixed in 0.24.0

n8n: Denial of Service via ZIP decompression in webhook workflow

• CWE-409

<2.24.0 · fixed in 2.24.0

tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)

• CWE-409

<6.5.6 · fixed in 6.5.6

aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup

• CWE-409

<3.14.1 · fixed in 3.14.1

Apache HTTP Server: mod_http2 denial of service

• Apache Software Foundation Apache HTTP Server
• Denial of service
• CWE-409

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

• CWE-409

>=0.1.0, <0.6.1 · fixed in 0.6.1

Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb

• CRUX Protocol::HTTP2
• CWE-409

Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend

• XML external entities (XXE)
• Denial of service

>=2.45.0, <2.91.0 · fixed in 2.91.0

Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression

• CWE-409

>=0.6.0, <1.18.3 · fixed in 1.18.3

ExifReader is vulnerable to denial of service via unbounded decompression of image metadata

• CWE-409

>=4.20.0, <4.39.0 · fixed in 4.39.0

CrowdSec LAPI: Denial of Service via Unbounded Gzip Decompression

• CWE-409

>=1.7.0, <1.7.8 · fixed in 1.7.8

Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

• CWE-409

>=0.1.0, <2.16.1 · fixed in 2.16.1

Klever-Go MultiDataInterceptor has remote OOM via crafted compressed P2P payload

• Denial of service
• CWE-409

<=1.7.16 · no fixed version yet

Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload

• advplyr audiobookshelf
• CWE-409

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

• CWE-409

>=2.6.0, <2.7.0 · fixed in 2.7.0

FITS GZIP decompression bomb in Pillow

• Denial of service
• CWE-409

>=10.3.0, <12.2.0 · fixed in 12.2.0

PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits

• CWE-409

<4.5.128 · fixed in 4.5.128

Tandoor Recipes Affected by Denial of Service via Recipe Import

• recipes
• CWE-409

Duplicate Advisory: Unfurl's unbounded zlib decompression allows decompression bomb DoS

• CWE-409

<2026.04 · fixed in 2026.04

JWCrypto: JWE ZIP decompression bomb

• CWE-409

<1.5.7 · fixed in 1.5.7

Mattermost doesn't validate decompressed archive entry sizes during file extraction

• CWE-409

>=8.0.0-20260105080200-d27a2195068d, <8.0.0-20260217110922-b7d4a1f1f59b || >=10.11.0, <10.11.12 || >=11.2.0, <11.2.4 || >=11.3.0, <11.3.2 || >=11.4.0, <11.4.1 · fixed in 8.0.0-20260217110922-b7d4a1f1f59b, 10.11.12, 11.2.4, 11.3.2, 11.4.1

NATS Server panic via malicious compression on leafnode port

• Memory corruption
• CWE-409

* · no fixed version yet

PDFME Affected by Decompression Bomb in FlateDecode Stream Parsing Causes Memory Exhaustion DoS

• CWE-409

<5.5.10 · fixed in 5.5.10

Keycloak: Denial of Service due to excessive SAMLRequest decompression

• CWE-409

<26.5.4 · fixed in 26.5.4

file-type: ZIP Decompression Bomb DoS via [Content_Types].xml entry

• Denial of service
• CWE-409

>=20.0.0, <21.3.2 · fixed in 21.3.2

Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression

• Denial of service
• CWE-409

<6.24.0 || >=7.0.0, <7.24.0 · fixed in 6.24.0, 7.24.0

Pre-auth SSH DoS via unbounded zlib inflate

• Erlang OTP
• CWE-409

MarkUs: Zip bomb in config upload enables DoS

• Markus
• CWE-409

Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib

• yhirose cpp-httplib
• Denial of service
• CWE-409

OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS)

• Denial of service
• CWE-409

<2026.3.2 · fixed in 2026.3.2

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

• Memory corruption
• Denial of service

<1.12.2 · fixed in 1.12.2

Sliver has Potential Zip Bomb Denial of Service in GzipEncoder

• CWE-409

<1.7.2 · fixed in 1.7.2

nats-server websockets are vulnerable to pre-auth memory DoS

• Denial of service
• CWE-409

<=1.4.1 · no fixed version yet

Unfurl's unbounded zlib decompression allows decompression bomb DoS

• Denial of service
• CWE-409

<20260405 · fixed in 20260405

Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

• Denial of service
• CWE-409

>=15.0.0-canary.0, <=15.0.0-canary.205 || >=15.0.1-canary.0, <=15.0.1-canary.3 || >=15.0.2-canary.0, <=15.0.2-canary.11 || >=15.0.3-canary.0, <=15.0.3-canary.9 || >=15.0.4-canary.0, <=15.0.4-canary.52 || >=15.1.1-canary.0, <=15.1.1-canary.27 || >=15.2.0-canary.0, <=15.2.0-canary.77 || >=15.2.1-canary.0, <=15.2.1-canary.6 || >=15.2.2-canary.0, <=15.2.2-canary.7 || >=15.3.0-canary.0, <=15.3.0-canary.46 || >=15.3.1-canary.0, <=15.3.1-canary.15 || >=15.4.0-canary.0, <=15.4.0-canary.130 || >=15.4.2-canary.0, <=15.4.2-canary.56 || >=15.5.1-canary.0, <=15.5.1-canary.39 || >=15.6.0-canary.0, <15.6.0-canary.61 || >=16.0.0-beta.0, <16.1.5 · fixed in 15.6.0-canary.61, 16.1.5

GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

• CWE-409

<2.7.1 · fixed in 2.7.1

cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb

• yhirose cpp-httplib
• CWE-409

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

• CWE-409

>=1.22, <2.6.3 · fixed in 2.6.3

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

• Denial of service
• CWE-409

<3.13.3 · fixed in 3.13.3

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability.

• CWE-409

Duplicate Advisory: python-jose denial of service via compressed JWE content

• CWE-409

<3.4.0 · fixed in 3.4.0

urllib3 streaming API improperly handles highly compressed data

• CWE-409

>=1.0, <2.6.0 · fixed in 2.6.0

pypdf's LZWDecode streams be manipulated to exhaust RAM

• Denial of service
• CWE-409

<6.4.0 · fixed in 6.4.0

An issue was discovered in Cinnamon kotaemon 0.11.0.

• CWE-409

pypdf can exhaust RAM via manipulated LZWDecode streams

• CWE-409

<6.1.3 · fixed in 6.1.3

ProcessWire CMS vulnerable to resource-exhaustion Denial of Service

• Denial of service
• CWE-409

<=3.0.246 · no fixed version yet

Netty's decoders vulnerable to DoS via zip bomb style attack

• CWE-409

<4.1.125.Final · fixed in 4.1.125.Final