-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| indy-node | pip | >= 0, <= 1.12.6 |
The vulnerability stems from insufficient firewall configuration guidance rather than specific code functions in indy-node. The root cause was inadequate iptables rules in deployment documentation/scripts (setup-iptables.md and setup_iptables script) that allowed connection exhaustion. While the setup_iptables script was modified in the fix, the vulnerability exists at the infrastructure configuration level rather than in application code functions. The CWE-400 classification refers to resource consumption through environmental factors (firewall settings) rather than specific software functions. No code functions in the indy-node package itself are identified as vulnerable with high confidence.
Ongoing coverage of React2Shell