1 matches found
Nest Affected by DoS via Recursive handleData in JsonSocket (TCP Transport)
Impact Attacker sends many small, valid JSON messages in one TCP frame → handleData recurses once per message; buffer shrinks each call → maxBufferSize is never reached; call stack overflows instead → A 47 KB payload is sufficient to trigger RangeError Patches Fixed in @nestjs/[email protected]....
7.5CVSS6AI score0.00329EPSS
SaveExploits0References3Affected Software1
20