CVE-2025-55152

Katalog CVE

CVSS 5.3 · Medium EPSS 0,39%

Kerentanan Uncontrolled Resource Consumption. Skor CVSS 3.1 5.3 (Medium) menurut github.com.

Deskripsi (NVD)

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers.

Rincian

Terbit di NVD

9 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

5.3 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 30,9% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/oakserver/oak/commit/b60e60330ef227707c4dc13ef0ea36192d894f44
• https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9