-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Content-Encoding peel count is unbounded, so decode CPU scales with an attacker-controlled header
bugSomething isn't workingSomething isn't workingStatus: Open.#94 In blacklanternsecurity/blasthttp;BatchConfig is missing max_body_size, so the memory bound is unreachable from the batch API
bugSomething isn't workingSomething isn't workingStatus: Open.#93 In blacklanternsecurity/blasthttp;Replacing a cookie moves it to the end, losing the RFC 6265 creation-time order
bugSomething isn't workingSomething isn't workingStatus: Open.#92 In blacklanternsecurity/blasthttp;Oversized cookie deletion is refused, so the stale cookie keeps being sent
bugSomething isn't workingSomething isn't workingStatus: Open.#91 In blacklanternsecurity/blasthttp;Deflate body cut short by max_body_size is reported as cleanly decoded
bugSomething isn't workingSomething isn't workingStatus: Open.#90 In blacklanternsecurity/blasthttp;HTTPS through a proxy is sent in cleartext: TLS is layered inside the tunnel
bugSomething isn't workingSomething isn't workingStatus: Open.#89 In blacklanternsecurity/blasthttp;- Status: Open.#48 In blacklanternsecurity/blasthttp;