CVE-2026-116131

A flaw was found in HTTP::Body. The module fails to limit the number of form fields or multipart parts processed in incoming request bodies. A remote attacker can exploit this vulnerability by sending a specially crafted request containing an excessive number of separators or file parts. This can...