Skip to content

fix: guard ReadTarEntry against decompression bombs (OOM)#2593

Open
jkutner wants to merge 1 commit into
mainfrom
fix/decompression-bomb-oom
Open

fix: guard ReadTarEntry against decompression bombs (OOM)#2593
jkutner wants to merge 1 commit into
mainfrom
fix/decompression-bomb-oom

Fix CVSS 3.1: 6.5 - pack OOM via decompression bomb in buildpack desc…

feac3f5
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded May 7, 2026 in 1s

No new alerts in code changed by this pull request

View all branch alerts.