GitHub Advisoryadvisory · npm

GHSA-xgp2-cc4r-7vf6 Denial of Service in http-live-simulator

MEDIUM Published 2020-09-03 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
http-live-simulator
Severity
Moderate
Reviewed
2020-08-31

Affected packages

• npm http-live-simulator: < 1.0.8 → fixed in 1.0.8

Description

Versions of `http-live-simulator` prior to 1.0.8 are vulnerable to Denial of Service. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that crashes the server. Recommendation Upgrade to version 1.0.8 or later.

References