Threats tagged 'ghsa-qh7p-pfq3-677h'

A denial of service (DoS) vulnerability exists in the event endpoint of Consul and Consul Enterprise due to the lack of a maximum limit on the Content-Length header. This flaw allows an attacker to potentially exhaust resources by sending excessively large requests. The issue is tracked as CVE-2025-11375 and has been fixed in Consul Community Edition 1.22.0 and Consul Enterprise versions 1.22.0, 1.21.6, 1.20.8, and 1.18.12.