CVE-2025-55152
oak: ReDoS in x-forwarded-proto and x-forwarded-for headers
概要
oak: ReDoS in x-forwarded-proto and x-forwarded-for headers
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com