You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Regular Expression Denial of Service in Deno.upgradeWebSocket API
Moderate
bartlomieju
published
GHSA-jc97-h3h9-7xh6Mar 23, 2023
Package
Deno
Affected versions
1.12.0
Patched versions
1.31.0
Description
Impact
What kind of vulnerability is it? Who is impacted?
A specially crafted "Connection"/"Upgrade" header could have been used to significantly slow down web socket servers which used "Deno.upgradeWebSocket()" API.
Patches
Has the problem been patched? What versions should users upgrade to?
It is recommended that users upgrade to Deno 1.31.0.
dellalibera Finder
Impact
What kind of vulnerability is it? Who is impacted?
A specially crafted "Connection"/"Upgrade" header could have been used to significantly slow down web socket servers which used "Deno.upgradeWebSocket()" API.
Patches
Has the problem been patched? What versions should users upgrade to?
It is recommended that users upgrade to Deno 1.31.0.