Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/24 7:39 p.m.9 views

GHSA-FC83-9JWQ-GC2M Web Push Denial of Service via malicious Web Push endpoint

Prior to version 0.10.3, the built-in clients of the web-push crate eagerly allocated memory based on the Content-Length header returned by the Web Push endpoint. Malicious Web Push endpoints could return a large Content-Length without ever having to send as much data, leading to denial of servic...

6.9CVSS7.1AI score0.00331EPSS
SaveExploits0References3
Rows per page
Query Builder