CVE-2026-107840

A flaw was found in yopass. The application records user-supplied HTTP request methods directly into its monitoring metrics registry without proper validation. An unauthenticated remote attacker can exploit this issue by submitting requests with numerous unique HTTP methods, triggering continuous...