| Package | Affected versions | Patched versions |
|---|---|---|
| moos-ivp | < 24.8.1 | 24.8.1 |
MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways with many variables to cause pRealm to generate excessive output indefinitely, exhausting system resources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free