CVE-2026-61541

Name of the Vulnerable Software and Affected Versions Zapros versions prior to 0.14.0

Description A denial of service occurs when an application requests content from an untrusted server or follows a redirect to one. A malicious response with an excessive number of chained Content-Encoding values forces the client to construct a deeply nested decompression chain, leading to excessive resource consumption.

Recommendations Update to version 0.14.0. As a temporary workaround, implement response middleware to inspect the Content-Encoding header and reject responses that exceed a safe number of encoding layers.