Corvusoft vulnerabilities
We track 2 vulnerabilities in Corvusoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Corvusoft vulnerabilities
- 7.5 High severity
restbed: Allocation of Resources Without Limits or Throttling
restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to e
- 7.5 High severity
restbed: Allocation of Resources Without Limits or Throttling
restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory. Attackers can open TCP connections and stream bytes indefinitely without sending the header delimiter