7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22870

CVE-2026-22870: GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, GuardDog's safe_extract() function does not validate decompressed file sizes when extracting ZIP archives (wheels, eggs), allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data. This vulnerability is fixed in 2.7.1.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22870

CVE-2026-22870:

7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
guarddog	pip	< 2.7.1	2.7.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic 'zip bomb' issue within the safe_extract function in guarddog/utils/archives.py. The function's logic for handling ZIP files (elif zipfile.is_zipfile(source_archive):) did not validate the potential size of the data before decompression. An attacker could craft a small, malicious ZIP file that, upon extraction, would fill up the disk, causing a Denial of Service. This is particularly dangerous in automated environments like CI/CD pipelines where a malicious package could halt all operations.

The patch, identified by commit c3fb07b4838945f42497e78b7a02bcfb1e63969b, rectifies this by introducing pre-extraction checks. It adds a _check_compression_bomb function that verifies three critical aspects: the total number of files, the total uncompressed size, and the compression ratio. These checks are performed before any files are written to disk. If any of the defined safety limits (MAX_FILE_COUNT, MAX_UNCOMPRESSED_SIZE, MAX_COMPRESSION_RATIO) are exceeded, the function now raises a ValueError, effectively neutralizing the zip bomb before it can cause harm. The vulnerable function is clearly safe_extract as it contained the flawed logic that was replaced by the patch.

Vulnerable functions

safe_extract

guarddog/utils/archives.py

The `safe_extract` function was vulnerable because it extracted files from a ZIP archive without first checking the total uncompressed size of its contents. This allowed a malicious, highly compressed file (a 'zip bomb') to be extracted, which would expand to an enormous size and consume all available disk space, leading to a Denial of Service. The patch adds a `_check_compression_bomb` helper function and invokes it before extraction to validate the archive's size, file count, and compression ratio against safe limits.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.