CVE-2026-103471

Name of the Vulnerable Software and Affected Versions restbed versions prior to 5.0.1

Description The software buffers HTTP request headers without enforcing a maximum size limit. This allows remote unauthenticated attackers to exhaust server memory by opening TCP connections and streaming bytes indefinitely without sending the header delimiter, which forces the server to allocate unbounded heap memory until the process is terminated.

Recommendations Update to a version newer than 5.0.0.