Uncaught Exception

Overview adm-zip is a JavaScript implementation for zip data compression for NodeJS. Affected versions of this package are vulnerable to Uncaught Exception via inflateAsync in methods/inflater.js when processing a ZIP entry containing malformed DEFLATE data. The zlib.createInflateRaw stream emits...

undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

Impact undici's WebSocket client including Node.js's bundled globalThis.WebSocket crashes the entire Node.js process when a remote WebSocket peer sends a permessage-deflate compressed message that crosses the decompressed-payload size limit and then contains a malformed DEFLATE block. In...