Threats tagged 'ghsa-76v6-f83q-pxvh'

A vulnerability in the hackney HTTP client library allows unbounded memory allocation when processing HTTP/3 responses. Specifically, the hackney_h3:await_response_loop/6 function accumulates the HTTP/3 response body in memory without any size limit. A malicious HTTP/3 server can send small chunks repeatedly without a final frame, causing the client to keep accumulating data indefinitely. This leads to exhaustion of the BEAM process heap and an out-of-memory condition. The issue affects hackney versions from 2.0.0 up to but not including 4.0.1.