← volver
CVE-2026-53781

Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download

CVSS 5.3 MEDIUMEPSS 0.3%CWE-770
Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers, chunked transfer encoding, or failed HEAD requests. Attackers who control a podcast feed or media URL can stream an unbounded response to local storage via the temp-file download path, exhausting disk or system resources on the host running the CLI.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Productos afectados
steipete · summarize

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →