TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Denial-of-Service in “qs” module (used by express, restify, hapi, +286 others)

14 点作者 HenrikJoreteg将近 11 年前

3 条评论

HenrikJoreteg将近 11 年前
Related advisories:<p><a href="https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking" rel="nofollow">https:&#x2F;&#x2F;nodesecurity.io&#x2F;advisories&#x2F;qs_dos_extended_event_loo...</a><p><a href="https://nodesecurity.io/advisories/qs_dos_memory_exhaustion" rel="nofollow">https:&#x2F;&#x2F;nodesecurity.io&#x2F;advisories&#x2F;qs_dos_memory_exhaustion</a>
chrisfosterelli将近 11 年前
How to check for this vulnerability in your app:<p><pre><code> &gt; npm install -g nsp &gt; nsp audit-package &#x2F;&#x2F; Run in the same dir as your package.json </code></pre> This will also report any other vulnerabilities, in addition to the &quot;qs&quot; vulnerability.
sorensen将近 11 年前
Great find, looks like this has already been patched in node-restify v2.8.1.