-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit diff shows a critical fix adding a check for 'h' initialization before usage in header folding logic. The vulnerability stems from CWE-248 (Uncaught Exception) where malformed headers trigger an undefined variable access. The patch specifically addresses this by wrapping the problematic line in an 'if (h)' check, confirming this was the vulnerable code path. All vulnerability descriptions and commit messages explicitly reference this function as the source of the crash.
JavaScriptJavaScript| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| dicer | npm | <= 0.3.1 | |
| org.webjars.npm:dicer | maven | <= 0.3.0 |
Ongoing coverage of React2Shell