CVE-2026-4111: Archive Missing Decompression Bounds Checkcve-2026-4111-archive-missing-decompression-bounds-check
Missing dynamic bounds check for block length against window size in filter parser. This can allow attackers to supply a nonsensically large block length, causing an infinite loop. Ensure the block length is bounded by a reasonable fraction of the dynamic window size.