CWE-1088: Synchronous Access of Remote Resource without Timeout

Base

The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.

Consequences

Other: Reduce Reliability

Recent advisories

GHSA-fhc2-8qx8-6vj7 — Vault Community Edition rekey and recovery key operations can cause denial of service
GHSA-5c8j-g96x-cj78 — H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
GHSA-3jqw-crqj-w8qw — Denial of service in django

All advisories for CWE-1088

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor