Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the WebSocket reader aiohttp/websocket/readerpy.py accumulating an unbounded number of per-read payload fragments in memory. An attacker can send a large number of tiny WebSocket...