https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 14:38:19 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-00685 cnvd-2018-00685 https://cve.radiocsirt.org/vuln/cnvd-2018-00685 https://cve.radiocsirt.org/vuln/euvd-2026-88534 EUVD-2026-88534 https://cve.radiocsirt.org/vuln/euvd-2026-88534 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10703 <p>A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.</p> <p>A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10703 https://cve.radiocsirt.org/vuln/ghsa-pm9p-9926-w68m <p><strong>Affected:</strong> npm: ecstatic</p> <p>`ecstatic`, a simple static file server middleware, is vulnerable to denial of service. If a payload with a large number of null bytes (`%00`) is provided by an attacker it can crash ecstatic by running it out of memory.</p> <p>[Results from the original advisory](https://www.checkmarx.com/advisories/denial-of-service-dos-vulnerability-in-ecstatic-npm-package/)</p> <p>``` A payload of 22kB caused a lag of 1 second, A payload of 35kB caused a lag of 3 seconds, A payload of 86kB caused the server to crash ```</p> <p>## Recommendation</p> <p>Update to version 2.0.0 or later.</p> <p><strong>Affected:</strong> npm: ecstatic</p> <p>`ecstatic`, a simple static file server middleware, is vulnerable to denial of service. If a payload with a large number of null bytes (`%00`) is provided by an attacker it can crash ecstatic by running it out of memory.</p> <p>[Results from the original advisory](https://www.checkmarx.com/advisories/denial-of-service-dos-vulnerability-in-ecstatic-npm-package/)</p> <p>``` A payload of 22kB caused a lag of 1 second, A payload of 35kB caused a lag of 3 seconds, A payload of 86kB caused the server to crash ```</p> <p>## Recommendation</p> <p>Update to version 2.0.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-pm9p-9926-w68m https://cve.radiocsirt.org/vuln/gsd-2016-10703 gsd-2016-10703 https://cve.radiocsirt.org/vuln/gsd-2016-10703