Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Wn123

#47382of 60,594
6.5Total CVSS
Vulnerabilities · 1
PT-2026-67809
2026-08-04
6.5
CVE-2026-69702
Snailjob
Snail-Job
An authenticated attacker can cause a denial of service by supplying a crafted Zstandard-compressed payload to the `FuryUtil.deserialize` helper. By inflating the `frame content size` field in the frame header and storing a base64-encoded Zstandard payload with an arbitrarily large decompressed size in a retry task argument, the attacker can force the JVM to attempt an unbounded array allocation. This results in an unrecoverable `java.lang.OutOfMemoryError` when the task is processed through the retry-task pipeline, crashing the server.