CVE-2022-21208

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB...

node-opcua 安全漏洞

node-opcua is an open source implementation of an OPC UA stack written entirely in Typescript for NodeJS by Sterfive SAS in France. A security vulnerability exists in node-opcua versions prior to 2.74.0 that stems from vulnerability to denial-of-service DoS attacks by sending specially crafted OP...