Skip to content
Threat Feed
Subscribe

Tag

Web-Framework

4 briefs RSS
low advisory

Phoenix Transport Channel Exhaustion Denial of Service

The Phoenix web framework lacks limits on channels per transport, allowing an unauthenticated attacker to cause a DoS by exhausting Erlang VM process limits via CVE-2026-56811.

Phoenix +3 denial-of-service web-framework cve-2026-56811
1c
low advisory

Security Constraint Bypass in VMware Tanzu Spring Framework

A vulnerability in VMware Tanzu Spring Framework identified as CVE-2024-38816 allows a remote, unauthenticated attacker to bypass security restrictions.

Spring Framework vulnerability web-framework patch-management
1c
high advisory

Salvo Web Framework Denial of Service Vulnerability (CVE-2026-33241)

The Salvo web framework before version 0.89.3 is vulnerable to denial of service due to unbounded memory allocation when parsing form data, enabling attackers to crash services by sending large payloads.

denial-of-service web-framework rust
2r 1t
high advisory

Salvo Web Framework Path Traversal Vulnerability

Salvo web framework versions 0.39.0 through 0.89.2 are vulnerable to Path Traversal and Access Control Bypass, allowing unauthenticated external attackers to bypass proxy routing constraints and access unintended backend paths.

path-traversal access-control-bypass web-framework
2r 1t