RockteMQ-AI commented on issue #2538: URL: https://github.com/apache/rocketmq-dashboard/issues/2538#issuecomment-5394996480
**Issue Evaluation** Category: `bug` | Status: **Confirmed** Valid security/reliability concern. The successful SSE streaming path lacks a payload budget, unlike the non-streaming and error paths which cap at 5 MiB. This inconsistency allows unbounded memory consumption. **Root Cause:** Missing size limit on successful SSE `InputStream` in AI provider client. **Impact:** A misbehaving or malicious provider can cause the dashboard to consume unbounded memory. **Severity:** Medium (security/reliability) --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
