11 matches found
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
Impact When body-parser is configured with an invalid limit option value, such as an unparseable string or NaN, bytes.parse returns null and the request body size check is silently skipped. Applications that rely on limit as their primary safeguard against oversized request bodies will accept...
5.9CVSS5.3AI score0.0027EPSS
SaveExploits0References10Affected Software1
20