Description
Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
github.com/tendermint/tendermint github.com/tendermint/tendermint/rpc/lib/client
Default version status: unaffected
0 to < 0.31.1affected