| Package | Affected versions | Patched versions |
|---|---|---|
| zebedee | = 2.4.1 |
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (application crash) via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free