A roughly 50 KB archive containing 50,000 empty directory entries created 50,000 inodes in about 2.2 seconds, an amplification of one inode per compressed byte. A depth-axis variant produced many inodes from a single entry, exhausting filesystem inodes.
Inode-exhaustion denial of service in archive extraction.
cve.org record · GitHub Security Advisory GHSA-c35g-mgc3-95rx