TI-2026-84848 CVE-2026-121727 · GHSA-f33j-xw62-gm9f
Integer underflow in Kore HTTP body handling exhausts memory
Priority LOW 38
Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared.