Skip to content
OpenAdvisories

Package · Go

github.com/junegunn/fzf

1 known vulnerabilities.

1 result · Feed

  • Medium 5.7

    Denial of Service in fzf

    fzf is vulnerable to a Denial of Service (DoS) due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity (O(n²)). A crafted POST request wit…