| Package | Affected versions | Patched versions |
|---|---|---|
| nodebb | ≤ 2.8.10 |
Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free