Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 1 total.

Severity: All Critical High

Library: github.com/crowdsecurity/crowdsec

CVE-2026-44981 HIGH CVSS 8.2 Verified Advisory Jul 16, 2026

Denial-of-service in CrowdSec's Local API (CVE-2026-44981)

CVE-2026-44981 is a denial-of-service vulnerability in CrowdSec's Local API (LAPI) component, caused by the use of `gin-contrib/gzip` with `DefaultDecompressHandle` globally without enforcing a maximum decompressed si...

Fixed in 1.7.8

Information Disclosure