~ / search / GHSA-wm7h-9275-46v2

GHSA-wm7h-9275-46v2

Crash in HeaderParser in dicer

Source: GitHub Advisory Database (reviewed) High CVE-2022-24434

Packages

EcosystemPackageAffectedFixed in
npm dicer <= 0.3.1 no fix listed
Maven org.webjars.npm:dicer <= 0.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versions of the package `dicer`. A malicious attacker can send a modified form to the server and crash the Node.js service. A complete denial of service can be achieved by sending the malicious form in a loop.

References

External links from the advisory. They lead to third-party sites.