Threats tagged 'ghsa-gv74-4w48-83fh'

A denial of service vulnerability exists in lmammino oidc-authorizer version 0.4.0 affecting the Authorization Header Parsing component. The flaw is in the parse_token_from_header function, where manipulation of the authorization_token argument can cause a denial of service. Remote exploitation is possible, and the vulnerability has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or fix is currently available.