Lucene search
+L

8 matches found

RedHat Linux
RedHat Linux
added 2024/09/03 8:0 p.m.4 views

gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization

A flaw was found in the gorilla/schema package. Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of schema.Decoder.Decode on a struct with arrays ...

7.5CVSS7.3AI score0.01105EPSS
SaveExploits0References7
Rows per page
Query Builder