| Package | Affected versions | Patched versions |
|---|---|---|
| mongoose | = 7.0≥ 6.7, ≤ 6.18 |
The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free