pleroma/changelog.d/mint-1.10.0.security at 4943e6a9147d62a326d94cc88edaf513f6f8f342 - hj/pleroma - Forgejo

hj/pleroma

Phantasm 47629351f0

Sec: Bump mint to version 1.10.0

Fixes:
  mint 1.9.3 - EEF-CVE-2026-82729 (MEDIUM)
    aka: CVE-2026-82729, GHSA-7p8w-j234-7qc8
    Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS
    https://osv.dev/vulnerability/EEF-CVE-2026-82729

  mint 1.9.3 - EEF-CVE-2026-82728 (HIGH)
    aka: CVE-2026-82728, GHSA-g83f-2j6r-q6m4
    Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS
    https://osv.dev/vulnerability/EEF-CVE-2026-82728

2026-09-08 21:53:48 +02:00

1 line

71 B

Text

Raw Blame History

Update mint to version 1.10.0 which fixes multiple DoS vulnerabilities