Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Websocket-extensions Project Clear all filters
TI-2020-06182 CVE-2020-7662 · GHSA-g78m-2chm-r7qv

Uncontrolled resource consumption in websocket-extensions

Priority LOW 38

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03088 Published 2020-06-02 Partial fix · 0.1.4 CWE-400
TI-2020-06183 CVE-2020-7663 · GHSA-g6wq-qcwm-j5g2

Uncontrolled resource consumption in websocket-extensions

Priority MEDIUM 40

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04639 Published 2020-06-02 Partial fix · 0.1.5 CWE-400