module: github.com/tendermint/tendermint
package: github.com/tendermint/tendermint/rpc/client
versions:
- fixed: v0.31.1
description: "A malicious server can exploit support for gzip compression to force\nthe
  client to consume significant system resources, leading to crashes. \n"
published: 2021-04-14T12:00:00Z
credit: '@guagualvcha'
symbols:
- makeHTTPClient
links:
  pr: https://github.com/tendermint/tendermint/pull/3430
  commit: https://github.com/tendermint/tendermint/commit/03085c2da23b179c4a51f59a03cb40aa4e85a613