GHSA-477v-w82m-634jHighCVSS 7.5

Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages

Published
July 16, 2022
Last Modified
August 29, 2023

🔗 CVE IDs covered (1)

CVE-2022-25891 →

📋 Description

The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service (DoS) via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages.

🎯 Affected products1

  • go/github.com/containrrr/shoutrrr:< 0.6.0

🔗 References (8)