| Package | Affected versions | Patched versions |
|---|---|---|
| mongoose | ≤ 6.13 |
An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free