98 matches found
undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
Impact undici's EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events peer. By sending millions of tiny completed data: fields with no blank event separator, or a single unfinished line split across many chunks, the parser retains a growing...
7.5CVSS7.1AI score0.00321EPSS
SaveExploits0References10Affected Software1
20