axum security vulnerabilities

axum is a Tokio open source web application framework focused on ergonomics and modularity. A security vulnerability exists in axum that stems from the fact that it does not limit the size of files, causing it to run out of memory and crash...

RUSTSEC-2022-0055 No default limit put on request bodies

::fromrequest would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large or infinite body your server might run out of memory and crash. This also applies to these extractors which used Bytes::fromrequest internally: -...

No default limit put on request bodies

::fromrequest would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large or infinite body your server might run out of memory and crash. This also applies to these extractors which used Bytes::fromrequest internally: -...

PT-2022-21101 · Axum-Core +1 · Axum-Core +1

Name of the Vulnerable Software and Affected Versions: axum versions ::from request function not setting a limit for the size of the request body by default. This allows a malicious peer to send a very large or infinite body, potentially causing the server to run out of memory and crash. The...