HIGHVulnerability
CVE-2026-91080
webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. Attackers can send multi-gigabyte request bodies with invalid signatures to trigger out-of-memory conditions and crash the service.
Properties
- severity
- HIGH
- score
- 7.5
- cve_id
- CVE-2026-91080
- signal_observed_at
- 2026-09-23T22:45:07+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- published_at
- 2026-09-14T18:20:29.760
- last_modified
- 2026-09-23T17:17:44.733
Related Entities (2)
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (1)
→[Weakness]Allocation of Resources Without Limits or Throttling
Explore deeper with Ninja Signal's threat intelligence graph