Threats tagged 'ghsa-8hrf-8g6f-7xwp'

A vulnerability in node-forge's TLS implementation allows a denial of service via an uncaught TypeError when processing a TLS record interleaved with a fragmented handshake message. This occurs because the process() function throws an exception after receiving an unexpected record type during a fragmented handshake, terminating Node.js processes using the documented socket wiring. The issue is fixed in node-forge version 1.4.1.