GHSA-m76r-xqqj-mqmv
Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | quivr-core | <= 0.0.14 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads to the server continuously processing each character, rendering the service unavailable and impacting all users.
References
External links from the advisory. They lead to third-party sites.