4/16/2023
•
EN
Disclosing uncontrolled resource consumption in xmlhttprequest library
Discloses a CWE-400 uncontrolled resource consumption vulnerability in the xmlhttprequest npm package due to missing timeout controls.