Lucene search
+L

30 matches found

OSV
OSV
added 2026/09/08 9:23 p.m.8 views

GHSA-G6GW-C38X-MQFC Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

Summary When parseBody expands dot-separated form field names into nested objects, it does not limit the nesting depth or the total number of objects created. A request body well within a normal size limit can therefore allocate an object graph far larger than the request itself, and concurrent...

5.3CVSS5.8AI score0.00388EPSS
SaveExploits0References5
Rows per page
Query Builder