Description (CNA)
The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| pimeys / web-push | affected 0 before 0.10.3 |
CWE
CWE-130
References
- https://rustsec.org/advisories/RUSTSEC-2025-0015.html
- https://github.com/pimeys/rust-web-push/pull/68
- https://crates.io/crates/web-push
ADP enrichment
No English description supplied.
No references supplied.