Skip to content
OpenAdvisories

Package · npm

@commercial/subtext

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High —
    GHSA-fvwr-h9xh-m6wc

    Denial of Service in @commercial/subtext

    Versions of `@commercial/subtext` prior to 5.1.1 are vulnerable to Denial of Service (DoS). The package fails to enforce the `maxBytes` configuration for payloads with chunked encoding that are written to the file system. This allows attackers to send request…

    @commercial/subtext npm
  • High —
    GHSA-36c4-4r89-6whg

    Prototype Pollution in @commercial/subtext

    Versions of `@commercial/subtext` prior to 5.1.2 are vulnerable to Prototype Pollution. A multipart payload can be constructed in a way that one of the parts’ content can be set as the entire payload object’s prototype. If this prototype contains data, it may…

    @commercial/subtext npm
  • High —
    GHSA-cvfm-xjc8-f2vm

    Denial of Service in @commercial/subtext

    Version 5.1.1 of `@commercial/subtext` is vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows syst…

    @commercial/subtext npm