Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2024/08/20 4:11 p.m.4 views

gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization

A flaw was found in the gorilla/schema package. Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of schema.Decoder.Decode on a struct with arrays ...

7.5CVSS7.3AI score0.01105EPSS
SaveExploits0References7
Rows per page
Query Builder