{"id":"GHSA-v6cj-r88p-92rm","aliases":[],"status":"published","title":"Buffer Overflow in centra","description":"## Denial of Service\n\n### Impact\n\nAffected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources.\n\n### Patches\n\nVersion 2.4.0 resolves the issue by limiting the size of buffered response body.\n\n### Workarounds\n\nAttempting workarounds isn't recommended. Updating is preferred.\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [ethanent/centra](https://github.com/ethanent/centra).","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2019-09-30T19:31:59Z","modified":"2023-01-09T05:03:25Z","fixes":[{"ecosystem":"npm","package":"centra","fixed_in":["2.4.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"centra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0"}]}]},{"source":"osv","ecosystem":"npm","package":"centra","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.0"}]}]}],"references":[{"url":"https://github.com/ethanent/centra/security/advisories/GHSA-v6cj-r88p-92rm","tags":["web"]},{"url":"https://github.com/advisories/GHSA-v6cj-r88p-92rm","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-CENTRA-536073","tags":["web"]},{"url":"https://github.com/ethanent/centra","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-v6cj-r88p-92rm","title":"Buffer Overflow in centra","description":"## Denial of Service\n\n### Impact\n\nAffected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources.\n\n### Patches\n\nVersion 2.4.0 resolves the issue by limiting the size of buffered response body.\n\n### Workarounds\n\nAttempting workarounds isn't recommended. Updating is preferred.\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [ethanent/centra](https://github.com/ethanent/centra).\n\n","status":"published","published":"2019-09-30T19:31:59Z","modified":"2023-01-09T05:03:25Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:36:05.071174Z"}],"osv":[{"id":"GHSA-v6cj-r88p-92rm","title":"Buffer Overflow in centra","description":"## Denial of Service\n\n### Impact\n\nAffected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources.\n\n### Patches\n\nVersion 2.4.0 resolves the issue by limiting the size of buffered response body.\n\n### Workarounds\n\nAttempting workarounds isn't recommended. Updating is preferred.\n\n### For more information\n\nIf you have any questions or comments about this advisory, open an issue in [ethanent/centra](https://github.com/ethanent/centra).\n\n","status":"published","published":"2019-09-30T19:31:59Z","modified":"2021-09-20T15:40:54Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:56.981655Z"}]}}