3 matches found
react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS
Summary React\Http\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received. ClientRequestStream::handleData appends every incoming byte to an internal buffer and only scans that buffer for the \r\n\r\n or \n\n terminator, withou...
7.5CVSS6AI score
SaveExploits0References4Affected Software1
20