Skip to content
Threat Feed
Subscribe

Product

@Anephenix/Hub < 0.2.16

1 brief RSS
medium advisory

@anephenix/hub Unauthenticated WebSocket RPC Waiter Resource Exhaustion (CVE-None)

An unauthenticated Denial-of-Service vulnerability in `@anephenix/hub` versions prior to 0.2.16 allows attackers to exhaust server CPU and memory resources by opening numerous WebSocket connections and ignoring server-initiated RPC messages, leading to unbounded timers and heap entries.

@anephenix/hub < 0.2.16 denial-of-service websocket node.js
1t