CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2015-9242
High (7.5) in ecstatic project ecstatic. EPSS 2.1% chance of exploitation in the next 30 days. Fixed in ecstatic 1.4.0.
Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.
Severity
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ecstatic_project:ecstatic
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vwjc-q9px-r9vq | npm | ecstatic | <1.4.0 | 1.4.0 |