| Package | Affected versions | Patched versions |
|---|---|---|
| python | = 3.14.0= 3.15.0≥ 3.11.0, < 3.11.15≥ 3.12.0, < 3.12.13≥ 3.13.0, < 3.13.11< 3.10.20 | 3.11.153.12.133.13.113.10.20 |
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free