2 matches found
Unbounded memory use on large request bodies
The graphql and graphqlsync functions of juniperhyper read the whole body of a POST request into memory before they parsed the body. The functions had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request needs no authentication...
6AI score
SaveExploits0Affected Software1
RUSTSEC-2026-0415 Unbounded memory use on large request bodies
The graphql and graphqlsync functions of juniperhyper read the whole body of a POST request into memory before they parsed the body. The functions had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request needs no authentication...
7.5CVSS6AI score
SaveExploits0References3
20