Uncontrolled Resource Consumption

Property	Value
Language
Severity
CWE	CWE-400: Uncontrolled Resource Consumption
Confidence Level	Low
Impact Level	Medium
Likelihood Level	Low

Description

The code copies data from compressed archives (like zip, gzip, or tar) without limiting how much is read. This can allow attackers to trigger a denial-of-service by providing extremely large or highly compressed files (decompression bombs).

Impact

If exploited, an attacker could cause your application to consume excessive memory or disk space, potentially crashing the system or making it unresponsive. This could disrupt service availability and impact other users or processes running on the same server.