Lucene search
+L

3 matches found

OSV
OSV
added 2026/05/05 9:15 p.m.18 views

GHSA-7XP7-M392-H92C @evomap/evolver has an unbounded request body in proxy /asset/submit that causes persistent disk-exhaustion DoS

Summary The EvoMap proxy daemon's HTTP body parser accepts requests of any size, and the POST /asset/submit route persists the full request body — verbatim and uncapped — as a JSONL line in /messages.jsonl. An unauthenticated local attacker other local user, container neighbor, or malicious npm...

6.2CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder