Lucene search
+L

194 matches found

Github Security Blog
Github Security Blog
•added 2026/10/08 5:52 p.m.•10 views

Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor

Summary defer temp.Close sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest exits. Send enough parts and you hit EMFILE. With CRS loaded, that flips MULTIPARTSTRICTERROR to 1 an...

5.3CVSS5.7AI score0.00322EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder