Skip to content

Kap-sh Zapros vulnerabilities

kap-sh zaprosZapros has an Unbounded Content-Encoding decompression chain that allows denial of serviceCVE-2026-61541Fix available6.9 MediumSeptember 21, 2026
kap-sh zaprosZapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)CVE-2026-61652Fix available8.7 HighSeptember 21, 2026