PatchTheCVEecstatic vulnerabilities and fixes
Recent CVEs affecting ecstatic, with upgrade or downgrade steps. 3 tracked.
ecstatic has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-01-02. Highest priority: CVE-2016-10703 (score 58/100).
- CVE-2019-10775 HIGH 7.5 MITIGATE ecstatic have a denial of service vulnerability
- CVE-2016-10703 HIGH 7.5 UPGRADE A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm pac
- CVE-2015-9242 HIGH 7.5 UPGRADE Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will caus
FAQ
How do I fix ecstatic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ecstatic being exploited right now?
None of the tracked ecstatic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ecstatic CVE should I patch first?
CVE-2016-10703 currently ranks highest (58/100): A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm pac.