You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Missing size validation in Package.Open for [Content_Types].xml #132394
Package.Open in ReadWrite mode unconditionally materializes [Content_Types].xml file in a MemoryStream. Since this is effectively metadata, we should limit the extracted size similarly as in #127602
Activity
dotnet-policy-service commentedon Aug 17, 2026
Tagging subscribers to this area: @karelz, @dotnet/area-system-io-compression
See info in area-owners.md if you want to be subscribed.
Add check for maximum possible size for [Content_Types].xml in Packag…