30 matches found
GHSA-G6GW-C38X-MQFC Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion
Summary When parseBody expands dot-separated form field names into nested objects, it does not limit the nesting depth or the total number of objects created. A request body well within a normal size limit can therefore allocate an object graph far larger than the request itself, and concurrent...
5.3CVSS5.8AI score0.00388EPSS
SaveExploits0References5
20