Skip to content
OpenAdvisories

Package · npm

meteor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    CVE-2025-4727

    Meteor livedata_server.js Object.assign redos

    A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedata_server.js. The manipulation of the argument forwardedFor leads to inefficient regular express…

    meteor npm