-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| axum-core | rust | < 0.2.8 | 0.2.8 |
| axum-core | rust | = 0.3.0-rc.1 | 0.3.0-rc.2 |
Miggo AIRoot Cause AnalysisThe vulnerability root cause is explicitly identified in multiple sources as the FromRequest implementation for Bytes type. This function's lack of size limitation propagates to dependent extractors (Form, Json, String) that use it internally. The GitHub advisory, CVE description, and commit diff all specifically reference this function as the source of the vulnerability. The fix involved adding http_body::Limited wrapper to enforce a 2MB default limit, confirming the vulnerable code path was in the from_request implementation.