The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length header.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| web-push(crates.io) | 0 | 0.10.4 | N/A |
CVSS Metrics
