Skip to content
OpenAdvisories

Package · Ubuntu

node-compression

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    compression vulnerable to Denial of Service via memory leak on premature response close

    compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted c…