Denial of Service (DoS)

Overview aiosend is a sync & async Crypto Pay API client. Affected versions of this package are vulnerable to Denial of Service DoS via the WebhookHandler.feedupdate function. An attacker can cause excessive CPU and memory consumption by sending large, arbitrary JSON payloads that are deserialize...

CVE-2026-70646

aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, "WebhookHandler.feedupdate" deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing of arbitrary JSON payloads that will...

CVE-2026-70646: Uncontrolled Resource Consumption

aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, WebhookHandler.feedupdate deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing of arbitrary JSON payloads that will...