Skip to content
OpenAdvisories

Package · Go

github.com/ffuf/ffuf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-73232

    ffuf denial of service (OOM) via HTTP response decompression bomb

    ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads…

    ffuf ffuf github.com/ffuf/ffuf ffuf Debian Ubuntu Go