Threats tagged 'ghsa-27fc-v9hw-m665'

Zipline versions before 4.6.4 have a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by manipulating Content-Range headers. This enables attackers to send small chunks with large declared offsets, causing the server to allocate excessive disk space and potentially exhaust storage resources.