Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 9:57 p.m.14 views

Hackney: Per-chunk timeout with unbounded body accumulation enables slow-drip OOM

Summary hackneyh3:awaitresponseloop/6 in src/hackneyh3.erl accumulates the HTTP/3 response body in memory without any size cap. The after Timeout clause is a per-message inactivity timer, not a wall-clock deadline: every received streamdata chunk, housekeeping select message, or settings frame...

8.2CVSS5.9AI score0.00703EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder