[ Vendor · 2 CVEs ]
kap-sh
CVEs affecting kap-sh published in the last 30 days, plus any kap-sh CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-61541 | 21 Sep 2026 | CVSS 6.9 | Zapros has an Unbounded Content-Encoding decompression chain that allows denial of serviceZapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service when an application requests content from an untrusted… | Fix |
| CVE-2026-61652 | 21 Sep 2026 | CVSS 8.7 | Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion. The issue affects all callers who… | Fix |