MAL-2025-16639 Malicious code in castle-oak-7ygn (npm)

The package castle-oak-7ygn was found to contain malicious code...

MAL-2025-37098 Malicious code in torrent-oak-sxs937-project (npm)

The package torrent-oak-sxs937-project was found to contain malicious code...

Malicious code in oak-dewdrop-rmz810-project (npm)

The package oak-dewdrop-rmz810-project was found to contain malicious code...

MAL-2025-27998 Malicious code in oak-quinoa-13os (npm)

The package oak-quinoa-13os was found to contain malicious code...

Malicious code in vista-oak-kvj235-project (npm)

The package vista-oak-kvj235-project was found to contain malicious code...

MAL-2025-27989 Malicious code in oak-hollow-qdw478-project (npm)

The package oak-hollow-qdw478-project was found to contain malicious code...

MAL-2025-28000 Malicious code in oak-zenith-cdt982-project (npm)

The package oak-zenith-cdt982-project was found to contain malicious code...

MAL-2025-27990 Malicious code in oak-jasmine-clb091-project (npm)

The package oak-jasmine-clb091-project was found to contain malicious code...

Malicious code in oak-golf-fo3p (npm)

The package oak-golf-fo3p was found to contain malicious code...

MAL-2025-28001 Malicious code in oak-zephyr-equ628-project (npm)

The package oak-zephyr-equ628-project was found to contain malicious code...

MAL-2025-27993 Malicious code in oak-lettuce-hhga (npm)

The package oak-lettuce-hhga was found to contain malicious code...

MAL-2025-27992 Malicious code in oak-kaleidoscope-psk469-project (npm)

The package oak-kaleidoscope-psk469-project was found to contain malicious code...

GHSA-R3V7-PC4G-7XP9 Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers

Summary With specially crafted value of the x-forwarded-proto or x-forwarded-for headers, it's possible to significantly slow down an oak server. Vulnerable Code - https://github.com/oakserver/oak/blob/v17.1.5/request.tsL87 - https://github.com/oakserver/oak/blob/v17.1.5/request.tsL142 PoC - setu...

Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers

Summary With specially crafted value of the x-forwarded-proto or x-forwarded-for headers, it's possible to significantly slow down an oak server. Vulnerable Code - https://github.com/oakserver/oak/blob/v17.1.5/request.tsL87 - https://github.com/oakserver/oak/blob/v17.1.5/request.tsL142 PoC - setu...

CVE-2025-55152

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers...

CVE-2025-55152

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers...

Regular Expression Denial of Service (ReDoS)

Overview @oakserver/oak is an A middleware framework for handling HTTP requests Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the x-forwarded-proto or x-forwarded-for headers. An attacker can cause significant performance degradation by sending...

windmill-cli (>=0.0.1, <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2, <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: SNYK:JS-OAKSERVEROAK-11735294...

CVE-2025-55152 oak: ReDoS in x-forwarded-proto and x-forwarded-for headers

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers...

CVE-2025-55152 oak: ReDoS in x-forwarded-proto and x-forwarded-for headers

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers...