A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1 < 14.15.1 and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1 14.15.1 and 12.19.1.

...

PT-2020-5516 · Node.Js +7 · Node.Js +7

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 12.19.1 Node.js versions prior to 14.15.1 Node.js versions prior to 15.2.1 Description: The issue is related to an uncontrolled resource consumption in Node.js, which can be exploited by a remote attacker to cause a...