Threats tagged 'ghsa-79vh-374g-g44h'

Apache Juneau versions through 9.2.0 contain a vulnerability in the MessagePack parser used by the REST server. An unauthenticated client can trigger large buffer allocations from crafted input length values, causing an OutOfMemoryError and denial of service. Related unbounded allocations in multipart uploads and request reader buffers are also addressed in the fix. The issue is resolved in version 9.2.1.