https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:24:49 +0000 https://cve.radiocsirt.org/vuln/cve-2025-71377 <p><strong>Affected:</strong> stoatchat</p> <p>stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages &#39;nearby&#39; another message, the database query can be given a message limit of zero, which the database interprets as &#39;no limit&#39;. A remote unauthenticated attacker can craft nearby message fetch requests to download an entire channel&#39;s message history in a single expensive request, and can send many such requests in parallel, resulting in denial of service through resource exhaustion.</p> <p><strong>Affected:</strong> stoatchat</p> <p>stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages &#39;nearby&#39; another message, the database query can be given a message limit of zero, which the database interprets as &#39;no limit&#39;. A remote unauthenticated attacker can craft nearby message fetch requests to download an entire channel&#39;s message history in a single expensive request, and can send many such requests in parallel, resulting in denial of service through resource exhaustion.</p> https://cve.radiocsirt.org/vuln/cve-2025-71377