zapros vulnerabilities (PyPI)

2 vulnerabilities.

• zapros PyPI Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service CVE-2026-61541 Fix available 6.9 MediumSeptember 21, 2026
• zapros PyPI Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb) CVE-2026-61652 Fix available 8.7 HighSeptember 21, 2026