Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/06/30 3:30 p.m.•3 views

fzf vulnerable to denial of service through quadratic HTTP request-body accumulation

fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...

7.5CVSS5.8AI score0.00419EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder