GitHub Advisoryadvisory · npm

GHSA-8237-3q5g-99fv Denial of Service vulnerability in lite-web-server

HIGH Published 2023-02-25 Modified 2023-02-27 Official page ↗
Aliases
CVE-2023-26104
Ecosystem
npm
Packages
lite-web-server
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2023-02-27

Affected packages

• npm lite-web-server: <= 1.2.2 (no fix yet)

Description

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.

Related

Alias · CVE (1)

  • CVE-2023-26104 All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References