Lucene search
+L

98 matches found

osv_ghsa
osv_ghsa
•added 2026/10/23 10:13 p.m.•18 views

GHSA-4QV8-2P9J-2685 undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

Impact undici's EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events peer. By sending millions of tiny completed data: fields with no blank event separator, or a single unfinished line split across many chunks, the parser retains a growing...

5.9CVSS7.1AI score0.00321EPSS
SaveExploits0References10
Rows per page
Query Builder