What is GHSA-xj79-6hh5-9w6q?

GHSA-xj79-6hh5-9w6q is a security advisory published by GitHub Security Advisories with Low severity. When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could...

Which CVE IDs does GHSA-xj79-6hh5-9w6q cover?

GHSA-xj79-6hh5-9w6q covers the following CVE IDs: CVE-2026-15310. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-xj79-6hh5-9w6qLow

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could...

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-15310 →

📋 Description

When decompressing crafted zip files using the bzip/LZMA/Zstandard

compressions, Python could use an attacker-controlled size to

pre-allocate memory, possibly resulting in memory exhaustion.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-15310
https://github.com/python/cpython/issues/156002
https://github.com/python/cpython/pull/156003
https://mail.python.org/archives/list/[email protected]/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK
https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4
https://github.com/advisories/GHSA-xj79-6hh5-9w6q