CVE-2020-36568: Revel

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

Affected products

• Revel Revel: before 1.0.0 (fixed in 1.0.0)

Published 2022-12-27. Last modified 2026-06-17.