Medium severity6.5NVD Advisory· Published Jan 10, 2023· Updated Jun 17, 2026

CVE-2023-22898

Description

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pandora/Pandoradescription
pandora-analysis/pandorallm-fuzzy
Range: <=1.3.0

Patches

Vulnerability mechanics

References

github.com/pandora-analysis/pandora/commit/1dc06327fdc07c56eae653e497dd137ec70d8265nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000