Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12.3M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-53430: Elixir Zlib Unbounded Decompressioncve-2026-53430-elixir-zlib-unbounded-decompression

Using unbounded decompression functions such as `:zlib.gunzip/1` or `:zlib.uncompress/1` leaves the application vulnerable to Denial of Service (DoS) via decompression bombs (zip bombs). An attacker can send a highly compressed payload that is inflated to a massive size in a single pass, exhausting memory. Avoid single-pass decompression on untrusted data. I

by Provallyupdated 2026-06-23Apache-2.0
3K0 direct3K via packs
downloads
69quality
All matching rules loaded.