7 matches found
EUVD-2026-58135
Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...
CVE-2026-42931
CVE-2026-42931 concerns Gitea’s NPM Package Tag Endpoint. Multiple sources confirm a Denial of Service arising from an unbounded read via io.ReadAll in that endpoint, impacting Gitea deployments that rely on the affected NPM tag endpoint. The root cause is described as unbounded resource usage du...
CVE-2026-42931 Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint
Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...
CVE-2026-42931 Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint
Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...
CVE-2026-73232
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...
