LuTiao Programming
Nov 11, 2026 · Information Security
80MB ZIP Bomb Exhausts 20GB Disk: Secure Extraction Practices for Spring Boot
This article details how an 80MB ZIP bomb exhausted a 20GB disk in a Spring Boot service, explaining ZIP bomb mechanics, Zip Slip directory traversal, and providing secure extraction code with limits on total uncompressed size, per-file size, entry count, compression ratio, and path normalization.
Java securitySpring BootZIP bomb
0 likes · 23 min read