CVE-2023-30591 (published 2023-09-29T05:06:43.923Z)
Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.
Affected products: Vendor: NodeBB, Inc.
Product: NodeBB
Versions: 0