7 matches found
Denial Of Service (DoS)
@feathersjs/transport-commons is vulnerable to Denial of Service DoS attacks. The vulnerability is due to invalid string conversions such as $ toString: '' , which causes the Feathers socket handler to crash the NodeJS process because its unable to handle invalid string conversions...
@z1/lib-api-box-client (>=0.2.1, <=0.3.0), @z1/lib-api-box-client-core (>=0.2.0, <=0.3.0) +9 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (4.2.1)
@feathersjs/transport-commons NPM version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @z1/lib-api-box-client =0.2.1, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.52, =0.2.52...
@z1/lib-api-box-client (>=0.2.1, <=0.3.0), @z1/lib-api-box-client-core (>=0.2.0, <=0.3.0) +9 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (4.2.1)
@feathersjs/transport-commons NPM version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @z1/lib-api-box-client =0.2.1, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.52, =0.2.52...
@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)
@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...
@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)
@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...
@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (5.0.5)
@feathersjs/transport-commons NPM version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on @feathersjs/transport-commons and may be impacted: - @ir-engine/server-core 1.6.0 - @ir-engine/taskserver 1.6.0 Source cves: CVE-2023-37899 Source advisory:...
@feathersjs/client (>=3.3.1, <=3.3.2), @feathersjs/primus (3.1.0) +14 more potentially affected by CVE-2023-37899 via @feathersjs/transport-commons (>=3.2.0, <=4.2.1)
@feathersjs/transport-commons NPM version =3.2.0, =3.3.1, =0.2.1, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.52, =0.2.52, =0.3.0 and more Source cves: CVE-2023-37899 Source advisory: MEND:CVE-2023-37899...