CVE-2019-10775

CVE-2019-10775 affects the Node.js module ecstatic . Several connected sources describe a denial-of-service condition where improper handling of requests (notably in redirects/URL parameters) can cause an application to crash. The Red Hat/IBM/OSS advisories and OSV entries corroborate a vulnerabi...

CVE-2016-10703

CVE-2016-10703 affects the npm package ecstatic, specifically the file lib/ecstatic.js, with vulnerable versions prior to 2.0.0. The flaw is a regular expression DoS that lets a remote attacker pass a crafted string to overload and crash the server. Impact is a denial of service affecting the ecs...

CVE-2015-9242

CVE-2015-9242 concerns the ecstatic Node.js module. The vulnerability affects versions before 1.4.0 and is triggered when certain input strings are passed via the Last-Modified or If-Modified-Since headers, causing v8 to crash and enabling a denial-of-service condition on the server. The issue st...