TI-2026-42624 CVE-2026-59803 · GHSA-hgrm-22x6-r8c8
rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol
Priority HIGH 77
rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-service vulnerability in protocol.Message.Decode (protocol/message.go).