A deceptively small parsing flaw in the popular Python WSGI utility library Werkzeug can be turned into a powerful denial-of-service weapon: specially crafted multipart/form-data uploads that start with a carriage return (CR) or line feed (LF), followed by megabytes of data without additional...
A high‑impact denial‑of‑service condition was disclosed in August 2023 that allows a malicious peer to cripple go‑libp2p nodes by presenting oversized RSA keys during cryptographic handshakes — forcing affected nodes to spend excessive CPU time verifying signatures and, in many cases, driving...