Description
A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads to the server continuously processing each character, rendering the service unavailable and impacting all users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| stangirard | stangirard/quivr | unspecified – ≤ latest | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | quivr-core | <= 0.0.14 | — | GHSA-m76r-xqqj-mqmv |