CVE-2026-34516: Unchecked Async Readline Accumulation

An unbounded string accumulation from an asynchronous stream was detected. Continuously appending data from `readline()` without line length limits and total count limits can lead to out-of-memory (OOM) situations and Denial of Service (DoS) attacks. Specify a size limit on the `readline()` call and enforce a bounding length for the list.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-34516-unchecked-async-readline-accumulation --engine opengrep

Description

An unbounded string accumulation from an asynchronous stream was detected. Continuously appending data from `readline()` without line length limits and total count limits can lead to out-of-memory (OOM) situations and Denial of Service (DoS) attacks. Specify a size limit on the `readline()` call and enforce a bounding length for the list.