Skip to content

Security (2/5): LZW + ASCIIHex limits — CVE-2026-28804, CVE-2025-62708, CVE-2025-66019#2

Merged
icanhasmath merged 2 commits into
1.28.6.xfrom
1.28.6-sec-filters-lzw-hex
Jun 23, 2026
Merged

Security (2/5): LZW + ASCIIHex limits — CVE-2026-28804, CVE-2025-62708, CVE-2025-66019#2
icanhasmath merged 2 commits into
1.28.6.xfrom
1.28.6-sec-filters-lzw-hex

Fix CVE-2025-62708, CVE-2025-66019: bound LZWDecode output

bbb064e
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar