1 matches found
CVE-2024-37298: Allocation of Resources Without Limits or Throttling
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...
7.5CVSS6.9AI score0.01105EPSS
SaveExploits0References1
20