Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Exx8O

#40670de 53,633
6.5CVSS total
Vulnerabilidades · 1
PT-2023-12132
6.5
2023-08-11
Suchmokuo · Node-Worker-Threads-Pool · CVE-2021-29057
**Name of the Vulnerable Software and Affected Versions** SUCHMOKUO node-worker-threads-pool version 1.4.3 **Description** An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool, allowing attackers to cause a denial of service. This issue can be mitigated by manually creating a timeout. **Recommendations** For version 1.4.3, consider creating a timeout when using the StaticPool to mitigate the risk of denial of service, for example by using the `setTimeout` method on the executor, as shown in the provided example code.