GHSA-hwfh-3wjq-8p68HighCVSS 7.5

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on...

Published
August 19, 2026
Last Modified
August 19, 2026

🔗 CVE IDs covered (1)

📋 Description

A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service.

🔗 References (4)