https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:14:05.560886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-71377 CVE-2025-71377 — stoatchat before 20250210-1 Unrestricted Message History Fetch 2026-10-07T07:14:05.576332+00:00

Affected: stoatchat

stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can be given a message limit of zero, which the database interprets as 'no limit'. A remote unauthenticated attacker can craft nearby message fetch requests to download an entire channel's message history in a single expensive request, and can send many such requests in parallel, resulting in denial of service through resource exhaustion.