Threats affecting pkg:github/eclipse-kura/kura

Eclipse Kura versions 0.7.0 through 5.6.2 have a vulnerability where deployment packages and REST upload requests can be downloaded or uploaded without any size limit. This can lead to exhaustion of local storage or RAM-backed temporary directories, causing denial of service conditions such as failed configuration persistence, failed logging, and potential crashes of the framework or other services. The vulnerability arises from the lack of limits on the size of data received from remote or local sources.