| Package | Affected versions | Patched versions |
|---|---|---|
| mongoose | ≥ 7.5, ≤ 7.17 |
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free