The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length header.
2025-07-05T01:15:28.340
2025-07-08T16:18:53.607
Awaiting Analysis
CVSSv3.1: 4.0 (MEDIUM)
-