Skip to content
OpenAdvisories

Package · npm

ecstatic

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High —
    GHSA-9q64-mpxx-87fg

    Open Redirect in ecstatic

    Versions of `ecstatic` prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an `HTTP 301` redirect to any other domains. ## Recommendation If using `ecstat…

    ecstatic npm
  • High —
    CVE-2015-9242

    Denial of Service in ecstatic

    Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Sin…

    HackerOne ecstatic node module ecstatic npm
  • High 7.5
    CVE-2016-10703

    Denial of Service in ecstatic

    A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.

    ecstatic npm