GHSA-8237-3q5g-99fvHighCVSS 7.5

Denial of Service vulnerability in lite-web-server

Published
February 25, 2023
Last Modified
February 27, 2023

🔗 CVE IDs covered (1)

CVE-2023-26104 →

📋 Description

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.

🎯 Affected products1

  • npm/lite-web-server:<= 1.2.2

🔗 References (5)