High severity7.5NVD Advisory· Published Apr 3, 2025· Updated Jun 17, 2026

CVE-2024-47212

Description

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.

Affected products

Iglu Server/Iglu Serverdescription
Iglu Server/Iglu Serverllm-create
Range: <=0.13.0
Snowplow/Iglu Serverllm-fuzzy
Range: <=0.13.0

Patches

Vulnerability mechanics

References

support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-UsersnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000