Skip to content
OpenAdvisories
High · 7.5 CVE-2016-10703 EUVD-2017-0364GHSA-pm9p-9926-w68m

Denial of Service in ecstatic

Published Dec 14, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.

Affected packages

EcosystemPackageAffectedFixedRecord
npm ecstatic < 2.0.0 2.0.0 GHSA-pm9p-9926-w68m

References