GHSA-wm7h-9275-46v2HighCVSS 7.5

Crash in HeaderParser in dicer

Published
May 21, 2022
Last Modified
August 28, 2023

🔗 CVE IDs covered (1)

CVE-2022-24434 →

📋 Description

This affects all versions of the package dicer. A malicious attacker can send a modified form to the server and crash the Node.js service. A complete denial of service can be achieved by sending the malicious form in a loop.

🎯 Affected products2

  • npm/dicer:<= 0.3.1
  • maven/org.webjars.npm:dicer:<= 0.3.0

🔗 References (7)