Skip to content
OpenAdvisories

Product · HackerOne

ecstatic node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2015-9242

    Denial of Service in ecstatic

    Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Sin…

    HackerOne ecstatic node module ecstatic npm