CVE-2026-22870 json
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
published 2026-01-13 9 mo ago modified 2026-07-07 4 mo ago also EUVD-2026-2013 , GHSA-ffj4-jq7m-9g6v , PYSEC-2026-1429
- cvss
- 7.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 43%
- public exploits
- 0
- none known
Summary
GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, GuardDog's safe_extract() function does not validate decompressed file sizes when extracting ZIP archives (wheels, eggs), allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data. This vulnerability is fixed in 2.7.1.
Patch / fix
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 9 mo ago
Exploit prediction
0.51% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/DataDog/guarddog/security/advisories/GHSA-ffj4-jq7m-9g6v referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | guarddog | <2.7.1 |
2.7.1 |
Affected products
- DataDog guarddog
Classification
- Weakness
-
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
References
-
github.com
/DataDog/guarddog/commit/c3fb07b4838945f42497e78b7a02bcfb1e63969b
web, patch
-
github.com
/DataDog/guarddog/security/advisories/GHSA-ffj4-jq7m-9g6v
web, exploit, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-22870
advisory
-
github.com
/DataDog/guarddog
package
-
pypi.org
/project/guarddog
package
-
github.com
/advisories/GHSA-ffj4-jq7m-9g6v
advisory
Sources
- CVE List CVE-2026-22870
- GitHub Advisory GHSA-ffj4-jq7m-9g6v
- NVD CVE-2026-22870
- OSV PYSEC-2026-1429
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.