If a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.
Thank you to Rich Harang for reporting this issue.
{ "nvd_published_at": "2025-07-04T22:15:22Z", "severity": "HIGH", "github_reviewed_at": "2025-07-04T22:06:31Z", "github_reviewed": true, "cwe_ids": [ "CWE-248" ] }