OSV 1.4.0 · github-reviewed · 修改于 2020-09-01 02:11
发布时间
2019-02-19 07:58
GitHub 审查时间
2020-06-17 05:18
NVD 发布时间
—
源文件
advisories/github-reviewed/2019/02/GHSA-6663-c963-2gqg/GHSA-6663-c963-2gqg.json
Affected versions of ws do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload.
Update to version 1.1.1 or later.
Alternatively, set the maxpayload option for the ws server to a value smaller than 256MB.