CVE-2025-14847: Compressed requests disclose memory before authentication

Unauthenticated compressed requests receive response bytes outside the submitted protocol message. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Online store / eu-west. Investigate mongo-wire, restore service, and verify the result.