Gorilla vulnerabilities
We track 1 vulnerability in Gorilla products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 1, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Gorilla vulnerabilities
- 7.5 High severity
schema: Allocation of Resources Without Limits or Throttling
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse