1 matches found
undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
Impact undici's WebSocket client including Node.js's bundled globalThis.WebSocket crashes the entire Node.js process when a remote WebSocket peer sends a permessage-deflate compressed message that crosses the decompressed-payload size limit and then contains a malformed DEFLATE block. In...
5.9CVSS5.8AI score0.00412EPSS
SaveExploits0References10Affected Software1
20