Threats tagged 'ghsa-7fp2-q7fp-2qwf'

Fleet versions before 4.83.0 have a denial of service vulnerability due to improper handling of gzip-compressed request bodies. Unauthenticated attackers can send small, highly compressed requests to unauthenticated endpoints, which expand during decompression and exhaust server memory, causing the Fleet instance to crash.