mint vulnerabilities (Hex)
14 vulnerabilities.
-
mintHex Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries 6.3 Medium -
mintHex Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size 6.3 Medium -
mintHex HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory 8.2 High -
mintHex Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections 6.3 Medium -
mintHex Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS 8.2 High -
mintHex Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS 6.3 Medium -
mintHex Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections 6.3 Medium -
mintHex Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory 6.3 Medium -
mintHex Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS 8.2 High -
mintHex mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5 8.7 High -
mintHex HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing 6.3 Medium -
mintHex HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation 8.2 High -
mintHex Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency 8.2 High -
mintHex CRLF injection in HTTP/1 request line via unvalidated method in Mint 2.1 Low