CVE-2020-7662
1 advisory.
npm/websocket-extensions CVE-2020-7662: high 8.2
Regular Expression Denial of Service in websocket-extensions (NPM package)
Action: Upgrade websocket-extensions to 0.1.4 or later.
npm i websocket-extensions@0.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.4 | - |
Fixed versions
| 0.1.4 |
Sources
- osv: GHSA-g78m-2chm-r7qv
- https://github.com/faye/websocket-extensions-node/security/advisories/GHSA-g78m-2chm-r7qv
- https://nvd.nist.gov/vuln/detail/CVE-2020-7662
- https://github.com/faye/websocket-extensions-node/commit/29496f6838bfadfe5a2f85dff33ed0ba33873237
- https://blog.jcoglan.com/2020/06/02/redos-vulnerability-in-websocket-extensions
- https://github.com/faye/websocket-extensions-node
- https://snyk.io/vuln/SNYK-JS-WEBSOCKETEXTENSIONS-570623
CVE-2020-7662 · published · modified · JSON