PT-2026-56580 · Elysia · Elysia
CVE-2026-56669
·
Published
2026-07-08
·
Updated
2026-07-10
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Elysia versions prior to 1.4.29
Description
Elysia is a Typescript framework used for request validation, type inference, OpenAPI documentation, and client-server communication. The framework uses the
getAll function during form data normalization for multipart/form-data endpoints. This implementation causes the processing workload to grow quadratically relative to the number of unique key-value pairs, which can lead to CPU exhaustion.Recommendations
Update to version 1.4.29.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Elysia