Skip to content

Security: Unbounded limit parameter in user search can be abused for resource exhaustion#8476

Merged
mejo- merged 1 commit into
nextcloud:mainfrom
tomaioo:fix/security/unbounded-limit-parameter-in-user-search
May 13, 2026
Merged

Security: Unbounded limit parameter in user search can be abused for resource exhaustion#8476
mejo- merged 1 commit into
nextcloud:mainfrom
tomaioo:fix/security/unbounded-limit-parameter-in-user-search

fix(security): clamp `limit` parameter in user search

685350f
Select commit
Loading
Failed to load commit list.
DCO / DCO succeeded May 13, 2026 in 0s

DCO

Commit sign-off was manually approved.