Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01562·Published 2022-12-27·Fixed in 1.0.0CWE-770