kap-sh/zapros Security Advisories | GitStock

medium2026-09-23

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service

GHSA-5vjj-2r48-q622 · CVE-2026-61541

high2026-09-23

Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)

GHSA-6cp7-3m3c-5x5c · CVE-2026-61652