Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/13 8:41 p.m.14 views

Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression

Description The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negotiates the permessage-deflate extension, the client decompresses incoming compressed frames without enforci...

7.5CVSS5.8AI score0.0115EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder