Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ecstatic npm package 安全漏洞
Vulnerability Description
ecstatic npm package是一款静态文件服务器中间件。 ecstatic npm package 2.0.0之前的版本中的lib/ecstatic.js文件存在拒绝服务漏洞。远程攻击者可通过传递恶意制作的字符串利用该漏洞造成拒绝服务(过载和崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A