| Package | Affected versions | Patched versions |
|---|---|---|
| leafnode | = 1.9.19= 1.9.20= 1.9.21= 1.9.22= 1.9.23= 1.9.24= 1.9.25= 1.9.26= 1.9.27= 1.9.29 |
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free