7.5
High
CVE-2022-25940 All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and…
Description
All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| lite-server | Versions not published |