https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-24375.htmlhttps://patchthecve.com/cve/CVE-2022-24375.htmlWed, 17 Jun 2026 04:31:43 +0000HIGH 7.5: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.https://patchthecve.com/cve/CVE-2022-25231.htmlhttps://patchthecve.com/cve/CVE-2022-25231.htmlWed, 17 Jun 2026 04:33:14 +0000HIGH 7.5: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.https://patchthecve.com/cve/CVE-2022-21208.htmlhttps://patchthecve.com/cve/CVE-2022-21208.htmlWed, 17 Jun 2026 04:25:45 +0000HIGH 7.5: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB