~ / search / GHSA-c9g6-9335-x697

GHSA-c9g6-9335-x697

Improper Input Validation in SocksJS-Node

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-7693

Packages

EcosystemPackageAffectedFixed in
npm sockjs < 0.3.20 0.3.20

Details

As written in the advisory (Markdown source, shown as plain text).

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

References

External links from the advisory. They lead to third-party sites.