| Package | Affected versions | Patched versions |
|---|---|---|
| mongoose | = 6.18 |
A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free