Skip to content

fix: guard ReadTarEntry against decompression bombs (OOM)#2593

Open
jkutner wants to merge 1 commit into
mainfrom
fix/decompression-bomb-oom
Open

fix: guard ReadTarEntry against decompression bombs (OOM)#2593
jkutner wants to merge 1 commit into
mainfrom
fix/decompression-bomb-oom

Fix CVSS 3.1: 6.5 - pack OOM via decompression bomb in buildpack desc…

feac3f5
Select commit
Loading
Failed to load commit list.
DCO / DCO succeeded May 7, 2026 in 1s

DCO

All commits are signed off!

View more details on DCO