Lucene search
K

10 matches found

Github Security Blog
Github Security Blog
added 2020/09/04 5:58 p.m.18 views

Denial of Service in @commercial/ammo

Versions of @commercial/ammo prior to 2.1.1 are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error is...

3.2AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/04 5:58 p.m.7 views

GHSA-RHC3-76JW-4F2X Denial of Service in @commercial/ammo

Versions of @commercial/ammo prior to 2.1.1 are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error is...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 3:46 p.m.20 views

Denial of Service in @hapi/ammo

Versions of @hapi/ammo prior to 3.1.2 or 5.0.1 are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error ...

3.2AI score
Exploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2020/09/03 3:46 p.m.3 views

@commercial/hapi (=19.0.2), @hapi/hapi (>=19.0.0 <=19.0.4) potentially affected by unknown CVE via @hapi/ammo (=4.0.1)

@hapi/ammo NPM version =4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/ammo and may be impacted: - @commercial/hapi =19.0.2 - @hapi/hapi =19.0.0, =19.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-GJPH-XF5Q-6MFQ...

5.8AI score
Exploits0
OSV
OSV
added 2020/09/03 3:46 p.m.9 views

GHSA-GJPH-XF5Q-6MFQ Denial of Service in @hapi/ammo

Versions of @hapi/ammo prior to 3.1.2 or 5.0.1 are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error ...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 3:45 p.m.25 views

Denial of Service in ammo

All versions of ammo are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error is thrown all the way up t...

3.4AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 3:45 p.m.10 views

GHSA-MG85-8MV5-FFJR Denial of Service in ammo

All versions of ammo are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, the error is thrown all the way up t...

6.9AI score
Exploits0References1
vulnersOsv
vulnersOsv
added 2020/09/03 3:45 p.m.1 views

3nit-components (>=0.0.2 <=0.0.4), 3nit-utils (>=0.3.0 <=0.23.0) +1584 more potentially affected by unknown CVE via ammo (>=1.0.1 <=3.0.3)

ammo NPM version =1.0.1, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MG85-8MV5-FFJR...

5.8AI score
Exploits0
Veracode
Veracode
added 2020/02/18 6:5 a.m.5 views

Denial Of Service (DoS)

@hapi/ammo is vulnerable to denial of service DoS. The Range HTTP header parser causes the function to throw a system error when the header value is invalid, allowing an attacker to crash the application using a malicious header value...

2.8AI score
Exploits0
Node.js
Node.js
added 2020/02/17 12:18 p.m.12 views

Denial of Service

Overview Versions of @hapi/ammo prior to 3.1.2 or 5.0.1 are vulnerable to Denial of Service. The Range HTTP header parser has a vulnerability which will cause the function to throw a system error if the header is set to an invalid value. Because hapi is not expecting the function to ever throw, t...

6.7AI score
Exploits0Affected Software1
Rows per page
Query Builder