Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 10:17 p.m.18 views

sse-channel: SSE Injection via unsanitized event fields

Impact Implementations that allows user-provided values to be passed to event, retry or id fields would be susceptible to event spoofing, where an attacker could inject arbitrary messages into the stream. - Event Spoofing: Attacker can inject arbitrary SSE events into the stream - Client-side...

8.7CVSS5.9AI score0.00479EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder