Skip to main content
← npm

node-opcua

6 known vulnerabilities (6 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 6 high
Weekly downloads
97.2K
Registry
npm

Advisories 6

  • node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

    Affected: from 2.0.0, fixed in 2.170.0.

  • node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS

    Affected: fixed in 2.166.0.

  • node-opcua: Missing nonce verification in UserNameIdentityToken authentication

    Affected: through 2.165.0.

  • Denial of Service (DoS)

    Affected: fixed in 2.74.0.

  • Denial of Service (DoS)

    Affected: fixed in 2.74.0.

  • Denial of Service (DoS)

    Affected: fixed in 2.74.0.