kap-sh zapros

• CVE-2026-61541 Medium 6.9 Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service 0.4%
• CVE-2026-61652 High 8.7 Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb) 0.4%