TI-2025-10609 CVE-2025-11579 · GHSA-rwvp-r38j-9rggDoS via Out Of Memory CrashPriority LOW 35github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via…CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00374 · Published 2025-10-10 · Partial fix · 2.2.0 CWE-789