Report: Latest: CVE-2026-9137 - CSP Report Endpoint Log Flooding via Incorrect Size Limit

Report: Latest: CVE-2026-9137 - CSP Report Endpoint Log Flooding via Incorrect Size Limit

CVE ID :CVE-2026-9137 Published : May 20, 2026, 8:16 p.m. | 25 minutes ago Description :The CSP report endpoint intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. On deployments where the endpoint is reachable by untrusted clients, this could allow attackers to generate excessive log volume and contribute to resource exhaustion or log flooding. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
May 20, 2026