320 matches found
Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion
Summary When parseBody expands dot-separated form field names into nested objects, it does not limit the nesting depth or the total number of objects created. A request body well within a normal size limit can therefore allocate an object graph far larger than the request itself, and concurrent...
5.3CVSS0.00388EPSS
SaveExploits0References5Affected Software1
20