TI-2026-44151 CVE-2026-61652 · GHSA-6cp7-3m3c-5x5c
Resource allocation without limits in kap-sh zapros
Priority MEDIUM 44
Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion.
kap-sh
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
kap-sh records in CISA KEVNo kap-sh vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2026-44101 CVE-2026-61541 · GHSA-5vjj-2r48-q622
Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service
Priority LOW 37
Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service when an application requests content from an untrusted server, or follows a redirect to one, because a malicious response containin…