CVE-2022-24375

Publication date

2022-08-24 05:05:12

Family

snyk

State

PUBLISHED

Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.