Security: crowdsecurity/crowdsec
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Unbounded request-body read in kubernetes-audit acquisition webhook (memory-exhaustion DoS)GHSA-rh69-4vqj-9gj8 published
Aug 31, 2026 by blotusModerate -
HTTP acquisition datasource lacks a decompressed body cap and trusts Content-LengthGHSA-g2x2-jgfg-pg7g published
Aug 31, 2026 by blotusModerate -
CrowdSec AppSec silently drops request body for chunked / HTTP-2 requestsGHSA-rw47-hm26-6wr7 published
May 27, 2026 by blotusHigh -
CrowdSec LAPI: Denial of Service via Unbounded Gzip DecompressionGHSA-273h-gvwr-c3qj published
May 27, 2026 by blotusModerate