GHSA-qpgc-xh7j-52q8
node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | node-opcua | < 2.74.0 | 2.74.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.
References
External links from the advisory. They lead to third-party sites.