2021-04-14 22:59:24 +03:00
|
|
|
module: github.com/tendermint/tendermint
|
|
|
|
|
package: github.com/tendermint/tendermint/rpc/client
|
|
|
|
|
versions:
|
2021-04-20 06:07:53 +03:00
|
|
|
- fixed: v0.31.1
|
|
|
|
|
description: |
|
|
|
|
|
Due to support of Gzip compression in request bodies, as well
|
|
|
|
|
as a lack of limiting response body sizes, a malicious server
|
|
|
|
|
can cause a client to consume a significant amount of system
|
|
|
|
|
resources, which may be used as a denial of service vector.
|
2021-04-14 22:59:24 +03:00
|
|
|
published: 2021-04-14T12:00:00Z
|
2021-04-20 06:07:53 +03:00
|
|
|
credit: "@guagualvcha"
|
2021-04-14 22:59:24 +03:00
|
|
|
symbols:
|
2021-04-20 06:07:53 +03:00
|
|
|
- makeHTTPClient
|
2021-04-14 22:59:24 +03:00
|
|
|
links:
|
|
|
|
|
pr: https://github.com/tendermint/tendermint/pull/3430
|
|
|
|
|
commit: https://github.com/tendermint/tendermint/commit/03085c2da23b179c4a51f59a03cb40aa4e85a613
|
