Search Vulnerabilities

Protobuf: Unbounded recursion depth in embedded-message decoding

Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values

Tesla vulnerable to atom exhaustion via untrusted URL scheme

Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering

Tesla has decompression bomb on response body

Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param`

mint: Unbounded streams map growth via PUSH_PROMISE without follow-up HEADERS

mint: Unbounded CONTINUATION/HEADERS frame accumulation (CONTINUATION flood)

mint: Content-Length header accepts non-RFC "+" sign prefix

mint has potential CRLF injection in its HTTP request line via unvalidated `method`/`target`

QUIC has Broken TLS verification

oban_web missing authorization check on `save-job` event handler

oban_web: Unbounded range expansion in cron describe causes memory exhaustion

RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API

RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins

ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass

Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes

Hackney has unbounded buffer accumulation in WebSocket

Hackney has CRLF / header injection in WebSocket upgrade request

Hackney has CR/LF injection in query parameter