Advisories for Pypi/Quivr-Core package

2025

Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary

A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads to the server continuously processing each character, rendering the service unavailable and impacting all users.