Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/06/08 3:33 p.m.•24 views

gun has an Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption vulnerability in ninenines gun gunhttp module allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gunhttp:handle/5, three clauses accumulate incoming TCP data into the connection's buffer field using binary concatenati...

8.7CVSS6.4AI score0.00641EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/06/08 3:33 p.m.•17 views

GHSA-R53J-FJJ5-MV77 gun has an Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption vulnerability in ninenines gun gunhttp module allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gunhttp:handle/5, three clauses accumulate incoming TCP data into the connection's buffer field using binary concatenati...

8.7CVSS6.4AI score0.00641EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/06/08 2:12 p.m.•14 views

CVE-2026-43973 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion

Uncontrolled Resource Consumption vulnerability in ninenines gun gunhttp module allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gunhttp:handle/5, three clauses accumulate incoming TCP data into the connection's buffer field using binary concatenati...

8.7CVSS6.4AI score0.00641EPSS
SaveExploits0References8
osv_eef
osv_eef
•added 2026/06/08 2:12 p.m.•24 views

EEF-CVE-2026-43973 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion

Summary Uncontrolled Resource Consumption vulnerability in ninenines gun gun\http module allows a malicious server to exhaust client memory via unbounded HTTP/1.1 response buffering. In gun\http:handle/5, three clauses accumulate incoming TCP data into the connection's buffer field using binary...

8.7CVSS6.4AI score0.00641EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/08 2:12 p.m.•33 views

EUVD-2026-35072

Unexpected Status Code or Return Value vulnerability in ninenines gun gunhttp module allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Protocols response. In gunhttp:handleinform/8, when a 101 Switching Protocols response is received over...

8.7CVSS6.1AI score0.00641EPSS
SaveExploits0References3
Rows per page
Query Builder