Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/07/16 7:34 p.m.41 views

CVE-2026-62963 Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket transport with uniwebsocket.compression enabled enforced uniwebsocket.messagesizelimit against compressed wire-frame length in internal/websocket/conn.go advanceFrame, but...

8.7CVSS0.00301EPSS
SaveExploits0References4
Rows per page
Query Builder