3 matches found
fzf vulnerable to denial of service through quadratic HTTP request-body accumulation
fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...
7.5CVSS5.8AI score0.00419EPSS
SaveExploits0References6Affected Software1
20