GHSA-ggw3-5987-rx77Published
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-50285 · CVE overview and exploitation status
cve-program · CVE-2026-50285
- https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77
- https://github.com/pomerium/pomerium/commit/593eb81c7e5bdbe6071a30d330f374967869577f
- https://github.com/pomerium/pomerium/releases/tag/v0.32.8
euvd · EUVD-2026-82410
- https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77
- https://github.com/pomerium/pomerium/commit/593eb81c7e5bdbe6071a30d330f374967869577f
- https://github.com/pomerium/pomerium/releases/tag/v0.32.8
nvd · CVE-2026-50285
- https://github.com/pomerium/pomerium/commit/593eb81c7e5bdbe6071a30d330f374967869577f
- https://github.com/pomerium/pomerium/releases/tag/v0.32.8
- https://github.com/pomerium/pomerium/security/advisories/GHSA-ggw3-5987-rx77
osv · GHSA-ggw3-5987-rx77
Related changes
Linked by CVE identifierNo related changes are available here.