GitHub Advisoryadvisory · npm

GHSA-v6cj-r88p-92rm Buffer Overflow in centra

HIGH Published 2019-09-30 Modified 2021-09-20 Official page ↗
Ecosystem
npm
Packages
centra
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-119
Reviewed
2020-06-16

Affected packages

• npm centra: < 2.4.0 → fixed in 2.4.0

Description

Denial of Service Impact Affected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources. Patches Version 2.4.0 resolves the issue by limiting the size of buffered response body. Workarounds Attempting workarounds isn't recommended. Updating is preferred. For more information If you have any questions or comments about this advisory, open an issue in ethanent/centra.

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References