netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-7vxc-q7rv-qfj8

Browse Source
This commit is contained in:
advisory-database[bot]
2024-10-03 17:27:56 +00:00
parent ef85b18125
commit f698fd559e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/08/GHSA-7vxc-q7rv-qfj8/GHSA-7vxc-q7rv-qfj8.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7vxc-q7rv-qfj8",
"modified": "2023-08-21T19:33:46Z",
"modified": "2024-10-03T17:26:26Z",
"published": "2023-08-11T15:30:46Z",
"aliases": [
"CVE-2021-29057"
],
"summary": "SUCHMOKUO node-worker-threads-pool denial of service Vulnerability",
"details": "An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3 that allows attackers to cause a denial of service.",
"details": "An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3 that allows attackers to cause a denial of service.\n\nThis can be mitigated by manually creating a timeout. For example:\n\n```ts\nconst { StaticPool } = require(\\\"node-worker-threads-pool\\\");\n\t\n\tconst staticPool = new StaticPool({\n size: 1,\n task: (n) => {\n while (n) {\n console.log(\\\"a\\\");\n }\n return n;\n }\n});\n \n staticPool.createExecutor().setTimeout(10).exec(1).then((result) => {\n console.log(\\\"result from thread pool:\\\", result);\n}).catch(() => console.error('timeout'));\n```",
"severity": [
{
"type": "CVSS_V3",