CVE-2022-24375
1 advisory.
npm/node-opcua CVE-2022-24375: high 7.5
node-opcua DoS when bypassing limitations for excessive memory consumption
Action: Upgrade node-opcua to 2.74.0 or later.
npm i node-opcua@2.74.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.74.0 | - |
Fixed versions
| 2.74.0 |
Sources
- osv: GHSA-vh4f-fgpp-x8x2
- https://nvd.nist.gov/vuln/detail/CVE-2022-24375
- https://github.com/node-opcua/node-opcua/pull/1182
- https://github.com/node-opcua/node-opcua/commit/3fd46ec156e7718a506be41f3916310b6bdd0407
- https://github.com/node-opcua/node-opcua/commit/7b5044b3f5866fbedc3efabd05e407352c07bd2f
- https://github.com/node-opcua/node-opcua
- https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988725
CVE-2022-24375 · published · modified · JSON