Lucene search
+L

8 matches found

NVD
NVD
•added 2025/12/12 8:15 a.m.•19 views

CVE-2025-67731

Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...

8.7CVSS0.00403EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/12 7:40 a.m.•3 views

CVE-2025-67731 Servify Express does not enforce rate limiting when parsing JSON

Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...

8.7CVSS6.3AI score0.00403EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/12 7:40 a.m.•38 views

CVE-2025-67731

CVE-2025-67731 affects Servify Express prior to 1.2. The issue is not a flaw in Express itself but in configuration: express.json() is used without a size limit, allowing attackers to send large JSON bodies that can cause high memory usage, degraded performance, or DoS. Version 1.2 fixes the issu...

8.7CVSS6.2AI score0.00403EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/12/12 7:40 a.m.•45 views

CVE-2025-67731 Servify Express does not enforce rate limiting when parsing JSON

Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...

8.7CVSS0.00403EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/12 7:40 a.m.•15 views

EUVD-2025-202768

Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...

8.7CVSS6.1AI score0.00403EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•19 views

PT-2025-50903

Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...

8.7CVSS6.6AI score0.00403EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•12 views

Servify Express 资源管理错误漏洞

Servify Express is an express parcel form server by the individual developer Aaron doran. A resource management error vulnerability exists in Servify Express versions prior to 1.2 that stems from the Express server not setting a JSON parsing size limit, which could lead to a denial of service...

8.7CVSS6.3AI score0.00403EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•0 views

CVE-2025-67731: Uncontrolled Resource Consumption

Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...

8.7CVSS5.9AI score0.00403EPSS
SaveExploits0References1
Rows per page
Query Builder