GitHub Advisoryadvisory · npm

GHSA-m86m-5m44-pc93 Denial of Service in grpc-ts-health-check

LOW Published 2020-09-03 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
grpc-ts-health-check
Severity
Low
Reviewed
2020-08-31

Affected packages

• npm grpc-ts-health-check: < 2.0.0 → fixed in 2.0.0

Description

Versions of `grpc-ts-health-check` prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status. Recommendation Upgrade to version 2.0.0 or later.

References