GHSA-3fm3-m23v-5r46
Tendermint Client package vulnerable to Uncontrolled Resource Consumption
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/tendermint/tendermint | < 0.31.1 | 0.31.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.
References
External links from the advisory. They lead to third-party sites.