CVE-2022-25940

CVE-2022-25940 affects lite-server (all versions) with a DoS condition caused by HTTP requests containing control characters that decodeURI() cannot parse. This leads to an availability impact (DoS) as described in multiple sources; CVSS v3.1 base score 7.5 (HIGH) in NVD/Snyk records. A remediati...

CVE-2022-25940 Denial of Service (DoS)

All versions of package lite-server are vulnerable to Denial of Service DoS when an attacker sends an HTTP request and includes control characters that the decodeURI function is unable to parse...