[SECURITY] No request size limiting on API endpoints - DoS vulnerability

[Siddh2024]

Description

The API endpoints do not limit incoming request body sizes. An attacker can send extremely large payloads to exhaust server memory and CPU, causing a denial of service.

Suggested Fix

Implement request body size limits using middleware (e.g., body-parser limit option or nginx client_max_body_size).

[aavishkarchaudhari]

Hi @Siddh2024,

I would like to work on this issue under GSSoC'26. I plan to implement request body size limits on the API endpoints to mitigate potential DoS attacks caused by excessively large payloads.

Could you please assign this issue to me?

Thank you!