CVE-2026-54465: Unbounded Streaming Chunk Parser

A chunk parsing method accumulates bytes into a buffer without tracking the total processed size via a counter increment. This allows an attacker to stream endless data and bypass individual buffer chunk limits if the buffer is cleared periodically. This unbounded condition leads to Out-Of-Memory (OOM) and DoS. Ensure that a global size counter is dynamicall

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Ruby
greprules fetch cve-2026-54465-unbounded-streaming-chunk-parser --engine opengrep

Description

A chunk parsing method accumulates bytes into a buffer without tracking the total processed size via a counter increment. This allows an attacker to stream endless data and bypass individual buffer chunk limits if the buffer is cleared periodically. This unbounded condition leads to Out-Of-Memory (OOM) and DoS. Ensure that a global size counter is dynamicall