Skip to content
OpenAdvisories

Vendor

boazsegev

6 known vulnerabilities.

Products

facil.io 6 iodine 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-66731 Public exploit

    facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

    facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser that allows unauthenticated remote attackers to crash the server by sending a negative chunk size value. Attackers can send a single POST …

    boazsegev facil.io
  • High 7.5
    CVE-2026-66730 Public exploit

    facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

    facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an unauthenticated remote attacker to permanently freeze worker processes at 100% CPU by sending a multipart/form-data request with a partial clos…

    boazsegev facil.io
  • High 7.5
    CVE-2026-66729 Public exploit

    facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

    facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attac…

    boazsegev facil.io