一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月27日

CVE-2026-100675 [MEDIUM] – stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowle

未分类
📑 文章目录

stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five crafted role-mention messages to terminate all acknowledgement workers, disabling push notifications and mention badges deployment-wide until the API process restarts.