Skip to content

Commit 46bef76

Browse files
makasimbwplotka
andcommitted
Update CHANGELOG.md
Co-authored-by: Bartlomiej Plotka <[email protected]> Signed-off-by: Max Kotliar <[email protected]>
1 parent 86dc055 commit 46bef76

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

CHANGELOG.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
## Unreleased
22

3-
:warning: This release introduces a 32MB hard limit on decoded snappy payloads to prevent potential OOM attacks. Requests with decoded payloads exceeding this limit will be rejected with HTTP 400 status code. See #1917 for details. :warning:
43

5-
* [BUGFIX] exp/api: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917.
4+
## Unreleased `exp` module
65

6+
* [BUGFIX] exp/api: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917.
77
## 1.23.2 / 2025-09-05
88

99
This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

0 commit comments

Comments
 (0)