GHSA-q6hh-gp44-4hcm
Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/pterodactyl/wings | < 1.13.0 | 1.13.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Summary
Config file parsers, `json`, `yaml`, `xml` etc in parser.go have no file size limit/checks, allowing for a giant config file to potentially OOM the wings process.
### Impact
All wings users who have an egg with a non-`file` parser configuration file setting.
References
External links from the advisory. They lead to third-party sites.