Executive brief
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
Affected products
- PyPI guarddog
Junglewise Threat Intelligence
CVE-2026-22870: PYSEC-2026-1429 - GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
CVE-2026-22870 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: guarddog (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1430 - GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
- DataDog GuardDog terminal escape injection in scan output
- DataDog GuardDog SSRF and credential disclosure in remote project scanning
- PYSEC-2022-42994 - GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning
- PYSEC-2022-42993 - GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file write when scanning a