2 matches found
BIT-GRAFANA-2026-33382 Denial of service via unbounded request body size
Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service...
GHSA-W6CQ-9CF4-GQPG RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API
Summary Responsibly disclosed by @NSEcho. HTTP API did not enforce an HTTP request body limit, making it vulnerable for DoS attacks with very large messages. Details An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be...