4 ms·
+1 on this. DOS are usually not considered security vulnerabilities. There is really no need to go to extreme length to keep one confidential. Just fill a githu
by user5994461 7y ago
+1 on this. DOS are usually not considered security vulnerabilities. There is really no need to go to extreme length to keep one confidential. Just fill a github issue in the project.
- WinonaRyder 7y agoSecurity vulnerability or not, it's still a DOS. Imagine having just a few requests (like less than 10) to your site consume 100% CPU until the server process is killed or restarted.
- Funnnny 7y agoIt depends on the exploit but DOS ARE security vulnerabilities and their impact can range from very low to high severity. And please OP don't listen to this and report the vulnerability responsibly even if you're not so sure if it's a security vulnerability or not