PatchSiren

airbnb CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review airbnb CVE published 2026-10-15

CVE-2026-95179

A denial-of-service vulnerability exists in lottie-android 6.7.1 and earlier. A remote attacker can cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion. This issue affects systems using lottie-android, particularly those with unvalidated or exposed Lottie animation processing. Defenders should assess exposure [truncated]