CVE-2025-55152
oak: ReDoS in x-forwarded-proto and x-forwarded-for headers
Summary
oak: ReDoS in x-forwarded-proto and x-forwarded-for headers
Original description
The description as published by the source.
oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com