constructEvent does not verify headers in @worker-tools/stripe-webhook before 1.1.4...
7.1CVSS5.8AI score
SaveExploits0References1
Veracode•added 2021/05/31 6:28 a.m.•22 views
Denial Of Service (DoS)
@worker-tools/stripe-webhook is vulnerable to denial of service. The verifyHeader is not an async function in the webhook and causes an error to be thrown after the request has finished...
