CVE-2025-65015: Exception Embeds Oversized Variable

A size check successfully prevents an oversized variable from being processed, but the entire untruncated variable is then embedded into the raised exception. If this exception is captured by error tracking systems or logs, it can lead to Denial of Service (DoS) and memory exhaustion. Refactor the code to omit the raw oversized payload from the exception mes

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0python
greprules fetch cve-2025-65015-exception-embeds-oversized-variable --engine opengrep

Description

A size check successfully prevents an oversized variable from being processed, but the entire untruncated variable is then embedded into the raised exception. If this exception is captured by error tracking systems or logs, it can lead to Denial of Service (DoS) and memory exhaustion. Refactor the code to omit the raw oversized payload from the exception mes

Detection target

Not provided

Recommended fix

Not provided

False-positive notes

Not provided

Community feedback

Sign in to report false positives, mark this rule useful, or suggest metadata improvements.