Wn123

**Name of the Vulnerable Software and Affected Versions** SnailJob version 1.7.0 **Description** An authenticated attacker can cause a denial of service by supplying a crafted Zstandard-compressed payload to the `FuryUtil.deserialize` helper. By inflating the `frame content size` field in the frame header and storing a base64-encoded Zstandard payload with an arbitrarily large decompressed size in a retry task argument, the attacker can force the JVM to attempt an unbounded array allocation. This results in an unrecoverable `java.lang.OutOfMemoryError` when the task is processed through the retry-task pipeline, crashing the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.