| module: github.com/tendermint/tendermint |
| package: github.com/tendermint/tendermint/rpc/client |
| versions: |
| - fixed: v0.31.1 |
| description: "A malicious server can exploit support for gzip compression to force\nthe |
| client to consume significant system resources, leading to crashes. \n" |
| published: 2021-04-14T12:00:00Z |
| credit: '@guagualvcha' |
| symbols: |
| - makeHTTPClient |
| links: |
| pr: https://github.com/tendermint/tendermint/pull/3430 |
| commit: https://github.com/tendermint/tendermint/commit/03085c2da23b179c4a51f59a03cb40aa4e85a613 |
