rack: Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

A flaw was found in Rack where Rack::Multipart::Parser stores non-file form fields entirely in memory without size limits. An attacker can send a multipart/form-data request with an extremely large text field, causing the server to allocate large amounts of memory which leads to a denial of servi...

Fedora 40 : python-quart (2024-51bff89a25)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-51bff89a25 advisory. Security fix for GHSA-q34m-jh98-gwm2. 0.19.8 2024-10-25 - Bugfix: Fix missing check that caused the previous fix to raise an error. 0.19.7 2024-10-25 -...