Threats tagged 'ghsa-xhrq-2ff6-99r3'

Anacrolix/torrent versions through 1.61.0 have a memory exhaustion vulnerability in the tracker/http package. Malicious HTTP trackers can send unbounded announce or scrape responses, causing the client to buffer excessive data and exhaust process memory, leading to crashes.