Skip to content

Version 0.40.0
Compare
Choose a tag to compare
@Kludex Kludex released this 15 Oct 06:51
· 29 commits to master since this release
0.40.0
4ded4b7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

This release fixes a Denial of service (DoS) via multipart/form-data requests.

You can view the full security advisory:
GHSA-f96h-pmfr-66vw

Fixed

  • Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
    requests fd038f3.
Assets 2
Loading