CVE-2026-44982 | crowdsecurity crowdsec up to 1.7.7 Request pkg/appsec/request.go NewParsedRequestFromRequest ContentLength allocation of resources

July 16, 2026 Yanac

A vulnerability described as very critical has been identified in crowdsecurity crowdsec up to 1.7.7. This issue affects the function NewParsedRequestFromRequest of the file pkg/appsec/request.go of the component Request. Executing a manipulation of the argument ContentLength can lead to allocation of resources.

This vulnerability is handled as CVE-2026-44982. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More