Lucene search
+L

52 matches found

Github Security Blog
Github Security Blog
•added 2026/10/28 9:10 p.m.•4 views

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

Summary permessage-brotli inflates each frame fully before checking maxMessagePayloadSize, so one 421-byte frame makes the server allocate about 545 MiB even with a 1 MiB message limit brotli expands about 1,000,000:1. Any unauthenticated client can exhaust server memory this way on servers that...

5.9CVSS6AI score0.00425EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder