Project
vgrep
Description
The /embed endpoint in api.rs accepts EmbedRequest with a single text field but has no validation on text length. A single request with gigabytes of text could exhaust server memory.
Error Message
Debug Logs
System Information
Bounty Version: 0.1.0
OS: Ubuntu 24.04 LTS
CPU: AMD EPYC-Genoa Processor (8 cores)
RAM: 15 GB
Screenshots
No response
Steps to Reproduce
- Start vgrep server
- Send:
curl -X POST http://localhost:7777/embed -d '{"text":"A"*10000000000}'
- Server attempts to process, exhausting memory
Expected Behavior
Request rejected if text exceeds reasonable limit
Actual Behavior
Any text size accepted
Additional Context
No response
Project
vgrep
Description
The
/embedendpoint inapi.rsacceptsEmbedRequestwith a singletextfield but has no validation on text length. A single request with gigabytes of text could exhaust server memory.Error Message
Debug Logs
System Information
Screenshots
No response
Steps to Reproduce
curl -X POST http://localhost:7777/embed -d '{"text":"A"*10000000000}'Expected Behavior
Request rejected if text exceeds reasonable limit
Actual Behavior
Any text size accepted
Additional Context
No response