Description
The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | node-opcua | unspecified – < 2.74.0 | 2.74.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | node-opcua | < 2.74.0 | 2.74.0 | GHSA-qpgc-xh7j-52q8 |