{"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"}