https://advisories.gitlab.com/npm/adm-zip/GHSA-rcw4-f5rp-g42v/
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring...
GHSA-rcw4-f5rp-g42v adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0: The fix shipped for...
decompression bombcan beadmzipprotection
https://vdb.ai.kr/vuln/GHSA-hcwq-8wjf-3gcr
PYSEC-2026-4179 — vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat · VDB
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
decompression bombvllmunauthenticatedaudiodos