CVE-2026-66730

CVE-2026-66730 concerns facil.io versions 0.6.0–0.7.6, where the multipart body parser is vulnerable to a denial-of-service. The root cause is a missing progress guard in the parser loop: http_mime_parse can return 0 bytes consumed without setting done or error flags, causing the caller to repeat...