GHSA-xgp2-cc4r-7vf6
Denial of Service in http-live-simulator
Versions of http-live-simulator prior to 1.0.8 are vulnerable to Denial of Service. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that crashes the server.
Recommendation
Upgrade to version 1.0.8 or later.
What each source reports
GitHub AdvisoriesNo score
Denial of Service in http-live-simulator
Versions of http-live-simulator prior to 1.0.8 are vulnerable to Denial of Service. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that crashes the server.
Recommendation
Upgrade to version 1.0.8 or later.
- Record
GHSA-xgp2-cc4r-7vf6- Updated
- 2026-11-02
OSVNo score
Denial of Service in http-live-simulator
Versions of http-live-simulator prior to 1.0.8 are vulnerable to Denial of Service. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that crashes the server.
Recommendation
Upgrade to version 1.0.8 or later.
- Record
GHSA-xgp2-cc4r-7vf6- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
http-live-simulatornpm | before 1.0.8 | 1.0.8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-xgp2-cc4r-7vf6 is a vulnerability with no CVSS score yet in http-live-simulator, published September 3, 2020. No source lists public exploit code. Fixed in http-live-simulator 1.0.8.