20 matches found
filecoin-pin: Unbounded DAG pinning can exhaust server resources
Summary The IPFS Pinning Service API implementation accepts a caller-controlled CID through POST /pins, queues background processing, and then recursively fetches the full DAG with helia.pins.addcid. The route and background pinning path do not enforce a request rate limit, per-user quota, maximu...
6.5CVSS0.00249EPSS
SaveExploits0References6Affected Software1
20