← CVE Intelligence

CVE-2026-22260

Suricata http1: infinite recursion in decompression PUBLISHED

Description (CNA)

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values for `request-body-limit` and `response-body-limit`.

Affected (CNA)

Vendor / productVersions
OISF / suricataaffected >= 8.0.0, < 8.0.3

CWE

CWE-674

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.