-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The vulnerability stems from unconstrained data retrieval operations. 1) Text.objects.query likely implements the raw database query without pagination controls. 2) WebAPI.handle_text_query processes these requests synchronously, combining both data access and serialization bottlenecks. Together they create a chain where large queries monopolize server resources. The CWE-1049 mapping confirms this pattern of excessive data operations without safeguards.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| aim | pip |
Ongoing coverage of React2Shell