Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/10/15 8:09 p.m.•4 views

react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS

Summary React\Http\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received. ClientRequestStream::handleData appends every incoming byte to an internal buffer and only scans that buffer for the \r\n\r\n or \n\n terminator, withou...

7.5CVSS6AI score0.00426EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder