CVE-2024-56528

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and can render it unresponsive to the rest of the requests. As a result, data would not enter the pipeline and would be potentially lost.

• CWE-400

• https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-UsersPatch, Release Notes

Published

Apr 3, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56522An issue was discovered in TCPDF before 6.8.0. unserializeTC…7.5
• CVE-2024-56523Radware Cloud Web Application Firewall (WAF) before 2025-05-…9.1
• CVE-2024-56524Radware Cloud Web Application Firewall (WAF) before 2025-05-…9.1
• CVE-2024-56525In Public Knowledge Project (PKP) OJS, OMP, and OPS before 3…9.8
• CVE-2024-56526An issue was discovered in OXID eShop before 7. CMS pages in…4.9
• CVE-2024-56527An issue was discovered in TCPDF before 6.8.0. The Error fun…7.5
• CVE-2024-56529Mailcow through 2024-11b has a session fixation vulnerabilit…7.1
• CVE-2024-5653A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-56531In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-56532In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-56533In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-56534In the Linux kernel, the following vulnerability has been re…5.5