CVE-2026-77357: Python Unbounded Long Poll In Routecve-2026-77357-python-unbounded-long-poll-in-route
The route handler contains a polling loop with sleep() that lacks a timeout or maximum duration check. An attacker can supply parameters that prevent the loop exit condition from triggering, causing worker threads or connections to block indefinitely and exhausting server resources.
