296,760
Total vulnerabilities in the database
Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking eventName.startsWith() or eventName.toString(), while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.
| Software | From | Fixed in |
|---|---|---|
| nodebb / nodebb | - | 2.8.10.x |