CVE-2017-14158

CVE-2017-14158 describes a denial-of-service vulnerability in Scrapy 1.4, where remote attackers can exhaust memory by sending large files. This occurs because the application reads entire files into memory, particularly when interacting with slow storage like S3FilesStore. Rated 7.5 HIGH, this vulnerability requires no user interaction or authentication, allowing unauthenticated attackers to cause a significant impact on availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.