Vendor/product archive

circl / pandora CVEs

Beta · best-effort

1 CVEs tagged to circl / pandora — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to circl vendor archive

CVE-2023-22898

Published Jan 10, 2023

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1