mtrudel bandit vulnerabilities
3 known CVE vulnerabilities in mtrudel bandit, translated and rated.
- CVE-2026-39806High
CVE-2026-39806 vulnerability in mtrudel bandit allows remote denial of service via worker process exhaustion. The issue occurs in the do_read_chunked_data!/5 function, which does not terminate correctly when trailer fields are present in chunked requests.
- CVE-2026-39803High
CVE-2026-39803 in mtrudel bandit has a resource allocation without limits vulnerability that allows unauthenticated remote denial of service via memory exhaustion. The do_read_chunked_data!/5 function does not cap the size of buffered data, leading to memory overflow.
- CVE-2026-39804High
CVE-2026-39804 vulnerability in mtrudel bandit allows for remote denial of service via memory exhaustion when permessage-deflate compression is enabled in WebSocket. An unauthenticated attacker can send a specially crafted frame, leading to an out-of-memory kill.