98 matches found
GHSA-4QV8-2P9J-2685 undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
Impact undici's EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events peer. By sending millions of tiny completed data: fields with no blank event separator, or a single unfinished line split across many chunks, the parser retains a growing...
5.9CVSS7.1AI score0.00321EPSS
SaveExploits0References10
20