Security release: Hummingbird 2.26.0
Swift Forums
Security release: Hummingbird 2.26.0
Users of Hummingbird should update to version 2.26.0 now. It includes fixes for the following security advisories Unbounded recursion in URLEncodedFormDecoder allows stack exhaustion It is possible for an attacker to construct a URL encoded form HTTP request that will cause a Hummingbird application using URLEncodedFormDecoder to crash via stack exhaustion. When decoding URL encoded form requests URLEncodedFormDecoder creates an intermediate node tree that is built using a recursive function. ...
0 comments
No comments yet.