#556 [API/Memory] response.py serialize_data recursion without depth limit

closed high Created 2025-12-17 16:30 · Updated 2025-12-17 20:02

Description

Edit
File: api/utils/response.py:20-39. serialize_data recursively processes nested data without depth limit. Maliciously crafted deeply nested payload could cause stack overflow. FIX: Add max_depth parameter with default 50.

Comments

Loading comments...

Context

Loading context...

Audit History

View All
Loading audit history...