Summary
In Textream for macOS prior to 1.5.1, the DirectorServer WebSocket server imposed no limit on concurrent connections.
Impact
Combined with a broadcast timer sending state to all clients every 100 ms, an attacker could exhaust CPU and memory by flooding the server, freezing and crashing the application during a live session.
Fix
Update to 1.5.1 or later. If you run your own server, cap concurrent connections and limit connections per source.
