CVE-2026-93471 - Unbounded SAML message decompression in esaml allows memory exhaustion
CVE ID :CVE-2026-93471 Published : Oct. 22, 2026, 6:59 a.m. | 1 hour, 7 minutes ago Description :Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust server memory and crash the Erlang VM via a crafted...