Skip to content
OpenAdvisories

Package · npm

websocket-extensions

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2020-7662

    Regular Expression Denial of Service in websocket-extensions (NPM package)

    websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequen…

    websocket-extensions npm