CVE-2026-61652 | kap-sh Zapros up to 0.13.x Decoder Response.iter_bytes chunk_size memory allocation

September 22, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in kap-sh Zapros up to 0.13.x. Affected is the function Response.iter_bytes of the component Decoder. Performing a manipulation of the argument chunk_size results in uncontrolled memory allocation.

This vulnerability is reported as CVE-2026-61652. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More