ffuf denial of service (OOM) via HTTP response decompression bomb in github.com/ffuf/ffuf
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6369" }
"https://vuln.go.dev/ID/GO-2026-6369.json"