Threats tagged 'ghsa-v74w-7mr3-4qg3'

Netty's XmlFrameDecoder component has a vulnerability that allows an unauthenticated remote attacker to cause a Denial of Service (DoS) via CPU exhaustion. The flaw arises when the decoder processes malicious XML payloads containing repeated '</' sequences, causing the server's EventLoop thread to become unresponsive due to excessive CPU usage. This affects applications using vulnerable versions of Netty's XML codec.