Product
Elysia versions before 1.4.29 are vulnerable to a denial-of-service attack due to quadratic time complexity in the 'multipart/form-data' normalization process, leading to CPU exhaustion.