CVE-2025-69223: Python Unbounded Decompression

Unbounded decompression was detected. Decompressing data without a `max_length` parameter can lead to a Denial of Service (DoS) via "zip bomb" memory exhaustion. Configure a safe `max_length` parameter to limit the size of the decompressed output.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2025-69223-python-unbounded-decompression --engine opengrep

Description

Unbounded decompression was detected. Decompressing data without a `max_length` parameter can lead to a Denial of Service (DoS) via "zip bomb" memory exhaustion. Configure a safe `max_length` parameter to limit the size of the decompressed output.