CVE-2022-25231
1 advisory.
npm/node-opcua CVE-2022-25231: high 7.5, EPSS 1.32%
node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit
Action: Upgrade node-opcua to 2.74.0 or later.
npm i node-opcua@2.74.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.74.0 | - |
Fixed versions
| 2.74.0 |
Sources
- osv: GHSA-qpgc-xh7j-52q8
- https://nvd.nist.gov/vuln/detail/CVE-2022-25231
- https://github.com/node-opcua/node-opcua/pull/1182
- https://github.com/node-opcua/node-opcua/commit/7b5044b3f5866fbedc3efabd05e407352c07bd2f
- https://github.com/node-opcua/node-opcua
- https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988724
CVE-2022-25231 · published · modified · JSON