- Advisory: GHSA-qxhc-2v6p-wm8m · CVE-2026-55782
- Severity: Low · CWE-400/CWE-789
- Status: publicly disclosed and fixed. Reported by Pig-Tail through coordinated disclosure.
Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields
Write-up only. No standalone runnable PoC is published for this finding here — refer to the linked advisory for full technical detail, affected range, and the fixed version.