| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/forceu/gokapi | < 2.2.4all versions | 2.2.4 |
| gokapi | < 2.2.4 | 2.2.4 |
An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users.
Any authenticated user can crash the Gokapi server by sending concurrent large payloads.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free