What is GHSA-f7r3-p866-q9qr?

GHSA-f7r3-p866-q9qr is a security advisory published by GitHub Security Advisories with Low severity. ircdkit vulnerable to Denial of Service due to unhandled connection end event

Why does GHSA-f7r3-p866-q9qr have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

What is the CVSS v3 score of GHSA-f7r3-p866-q9qr?

GHSA-f7r3-p866-q9qr has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

Which products are affected by GHSA-f7r3-p866-q9qr?

GHSA-f7r3-p866-q9qr affects 1 product, including: npm/ircdkit:\u003c= 1.0.3.

GHSA-f7r3-p866-q9qrLowCVSS 3.7Disclosed before NVD

ircdkit vulnerable to Denial of Service due to unhandled connection end event

Vendor

GitHub Security Advisories

Published

June 3, 2019

Last Modified

January 11, 2023

📋 Description

Versions of ircdkit 1.0.3 and prior are vulnerable to a remote denial of service.

Recommendation

Upgrade to version 1.0.4.

🎯 Affected products1

npm/ircdkit:<= 1.0.3

🔗 References (6)

https://github.com/Twipped/ircdkit/issues/1
https://github.com/Twipped/ircdkit/commit/f0cc6dc913ec17b499fa33a676bb72c624456f2c
https://www.npmjs.com/advisories/735
https://snyk.io/vuln/SNYK-JS-IRCDKIT-173688
https://github.com/Twipped/ircdkit/pull/2/commits/595ed02cde517fad57854d2ac2855a09a626e665
https://github.com/advisories/GHSA-f7r3-p866-q9qr