{"id":"EUVD-2026-29863","enisaUuid":"e691481b-e7c0-375b-aa83-1c98c3db11a5","description":"Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. This vulnerability is fixed in 1.3.1.","datePublished":"May 12, 2026, 9:33:07 PM","dateUpdated":"May 18, 2026, 3:10:25 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/brantburnett/Snappier/security/advisories/GHSA-pggp-6c3x-2xmx\n","aliases":"CVE-2026-44302\nGHSA-pggp-6c3x-2xmx\n","assigner":"GitHub_M","epss":0.32,"enisaIdProduct":[{"id":"5e7ad5a1-2675-33d2-b928-6e5ef2a01071","product":{"name":"Snappier","vendor":{"name":"brantburnett"}},"product_version":"\u003c 1.3.1"}],"enisaIdVendor":[{"id":"1a6a2acc-1af5-372a-94e8-c8bc700b8321","vendor":{"name":"brantburnett"}}],"enisaIdVulnerability":[{"id":"04cfbfee-3c61-36c5-a65e-17a4c86da511","vulnerability":{"id":"GHSA-pggp-6c3x-2xmx","description":"Snappier has an infinite loop during SnappyStream decompression with malformed framed input","datePublished":"May 6, 2026, 8:53:23 PM","dateUpdated":"May 13, 2026, 4:41:52 PM","baseScore":0.0,"references":"https://github.com/brantburnett/Snappier/security/advisories/GHSA-pggp-6c3x-2xmx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44302\nhttps://github.com/brantburnett/Snappier\n","enisa_id":"EUVD-2026-29863\n","aliases":"CVE-2026-44302\nGHSA-pggp-6c3x-2xmx\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fc618fa1-15ae-3de9-b3e0-d89c095c2987","vulnerability":{"id":"CVE-2026-44302","description":"Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. This vulnerability is fixed in 1.3.1.","datePublished":"May 12, 2026, 9:33:07 PM","dateUpdated":"May 18, 2026, 3:10:25 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/brantburnett/Snappier/security/advisories/GHSA-pggp-6c3x-2xmx\n","enisa_id":"EUVD-2026-29863\n","assigner":"GitHub_M","epss":0.32,"dataProcessed":"Oct 28, 2026, 7:17:27 AM","vulnerabilityProduct":[{"id":"9c1dec2a-6d56-317f-9748-39421b245d60","product":{"name":"Snappier","vendor":{"name":"brantburnett"}},"product_version":"\u003c 1.3.1"}],"vulnerabilityVendor":[{"id":"45730b72-73c5-339c-b014-a2edcaa8c7f6","vendor":{"name":"brantburnett"}}]}}],"enisaIdAdvisory":[]}