Memory Exhaustion Vulnerability in Webhook by Adnanh

CVE-2026-91080

What is CVE-2026-91080?

Webhook version 2.8.3 has a vulnerability that allows unauthenticated attackers to send excessively large request bodies, potentially reaching multi-gigabyte sizes. This occurs because the system reads the entire request body into memory prior to evaluating any trigger rules. As a result, attackers can exploit this behavior to initiate out-of-memory conditions, effectively crashing the service by overwhelming its memory resources with specially crafted requests that contain invalid signatures.

References