Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/03/13 8:41 p.m.•31 views

Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression

Description The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negotiates the permessage-deflate extension, the client decompresses incoming compressed frames without enforci...

7.5CVSS6.5AI score0.0117EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder