CVE-2026-3816 | OWASP DefectDojo up to 2.55.4 SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service

A vulnerability was found in OWASP DefectDojo up to 2.55.4. It has been classified as problematic. This vulnerability affects the function input_zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service.

This vulnerability is documented as CVE-2026-3816. The attack can be initiated remotely. Additionally, an exploit exists.

Upgrading the affected component is recommended.