CVE-2026-38361P3HIGHCVSS 7.5PoC≥ 0.1.0, ≤ 0.6.1·v0.7.0-alpha1+1 more2026-05-08
CVE-2026-38361 [HIGH] CWE-400 CVE-2026-38361: Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.
Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-upload handler (dash_uploader/httprequesthandler.py, dash_uploader/upload.py) trusts unsanitized, attacker-controlled upload parameters (e.g. flowTotalChunks) and does not enforce the documented max_file_size limit, allowing a remote,
nvd