bandit
Hex · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Bandit: Unauthenticated DoS via chunked request trailers in Bandit HTTP/1 decoder | bandit | Hex | High | Fix reported | |
| Bandit: Unauthenticated one-shot DoS via `Transfer-Encoding: chunked` | bandit | Hex | High | Fix reported | |
| Bandit HTTP/2 Frame Size Limit Bypass via Late Buffer Check Enables Memory Exhaustion | bandit | Hex | Medium | Fix reported | |
| Bandit trusts client-supplied URI scheme on plaintext connections | bandit | Hex | Medium | Fix reported | |
| Bandit is vulnerable to CL.CL request smuggling via unrejected duplicate `Content-Length` header | bandit | Hex | Medium | Fix reported | |
| Bandit Buffers Unbounded WebSocket Continuation Frames, Allowing Unauthenticated Memory Exhaustion | bandit | Hex | High | Fix reported | |
| Bandit's unbounded WebSocket inflate causes BEAM OOM with a single frame | bandit | Hex | High | Fix reported |