Source: rdflib
Version: 6.1.1
Severity: critical
Tags: security upstream
Forwarded: https://github.com/RDFLib/rdflib/issues/1844

Hello,

rdflib will attempt to resolve any URL in @context in POSTed JSON-LD
messages, leading to various probing and DDoS vectors, see the upstream
discussion [1].

[1] https://github.com/RDFLib/rdflib/issues/1844

Andrius

Reply via email to