Vulnerability Database

PYSEC-2026-4181

PyPI/zapros

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service 01 Oct

Fix available
Severity - 6.9 (Medium)

PYSEC-2026-4182

PyPI/zapros

Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb) 01 Oct

Fix available
Severity - 8.7 (High)

GHSA-5vjj-2r48-q622

PyPI/zapros

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service 23 Sep

Fix available
Severity - 6.9 (Medium)

GHSA-6cp7-3m3c-5x5c

PyPI/zapros

Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb) 23 Sep

Fix available
Severity - 8.7 (High)

CVE-2026-61541

github.com/kap-sh/zapros

Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service 21 Sep

Fix available
Severity - 6.9 (Medium)

CVE-2026-61652

github.com/kap-sh/zapros

Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb) 21 Sep

Fix available
Severity - 8.7 (High)

Vulnerabilities