Threats affecting pkg:github/kore

Kore versions before 4.3.0 have an integer underflow vulnerability in HTTP request body handling. This flaw allows unauthenticated attackers to bypass the http_body_max limit by sending more body bytes than declared. By sending oversized first segments over many concurrent POST, PUT, or DELETE connections, attackers can cause content_length to wrap around, leading to unbounded buffer growth and exhaustion of worker memory.