twipped/ircdkit · Security
ircdkit vulnerable to Denial of Service due to unhandled connection end event
- GHSA ID
- GHSA-f7r3-p866-q9qr
- Severity
- low
- Published
- Updated
- CVSS
- 3.7 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS v3
- 3.7 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
Versions of ircdkit 1.0.3 and prior are vulnerable to a remote denial of service.
Recommendation
Upgrade to version 1.0.4.
CWEs
- CWE-400 · Uncontrolled Resource Consumption
References
- https://github.com/Twipped/ircdkit/issues/1 ↗
- https://github.com/Twipped/ircdkit/commit/f0cc6dc913ec17b499fa33a676bb72c624456f2c ↗
- https://www.npmjs.com/advisories/735 ↗
- https://snyk.io/vuln/SNYK-JS-IRCDKIT-173688 ↗
- https://github.com/Twipped/ircdkit/pull/2/commits/595ed02cde517fad57854d2ac2855a09a626e665 ↗
- https://github.com/advisories/GHSA-f7r3-p866-q9qr ↗