3 ms·

I don't think there's anything fanciful in having a request with well-crafted data cause remote code execution. I might be missing something though.