Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2020/10/16 5:3 p.m.85 views

Memory exhaustion in http4s-async-http-client with large or malicious compressed responses

Impact A server we connect to with http4s-async-http-client could theoretically respond with a large or malicious compressed stream and exhaust memory in the client JVM. It does not affect http4s servers, other client backends, or clients that speak only to trusted servers. This is related to a...

7.5CVSS1.2AI score0.09438EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder