Lucene search
+L

98 matches found

Github Security Blog
Github Security Blog
•added 2026/10/23 10:13 p.m.•22 views

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

Impact undici's EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events peer. By sending millions of tiny completed data: fields with no blank event separator, or a single unfinished line split across many chunks, the parser retains a growing...

7.5CVSS7.1AI score0.00321EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder