Skip to content
OpenAdvisories

Package · npm

subtext

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-2mvq-xp48-4c77

    Denial of Service in subtext

    All versions of `subtext` are vulnerable to Denial of Service (DoS). The package fails to enforce the `maxBytes` configuration for payloads with chunked encoding that are written to the file system. This allows attackers to send requests with arbitrary payloa…

    subtext npm