CERT24GHSA-f48p-c9v4-h7xv — Echo v4 BodyDump captures request and response bodies without size limitsLoading data…
CERT24Threat Observatory
Period

GHSA-f48p-c9v4-h7xv — Echo v4 BodyDump captures request and response bodies without size limits

Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. Repeated or concurrent large requests can exhaust process memory and cause denial of service. BodyDump is not enabled by default.

← Back to intelligence

GHSA-f48p-c9v4-h7xv — Echo v4 BodyDump captures request and response bodies without size limits

Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. Repeated or concurrent large requests can exhaust process memory and cause denial of service. BodyDump is not enabled by default.