Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/22 5:27 p.m.14 views

GHSA-7M8F-HGJQ-8GC9 aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler

Summary WebhookHandler.feedupdate deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expensive parsing of arbitrary JSON payloads that will ultimately be rejected, leading to unnecessary CPU and memory consumption. Severity...

7.5CVSS5.7AI score0.0035EPSS
SaveExploits0References4
Rows per page
Query Builder