CVE-2025-55152 Information

Description

oak is a middleware framework for Deno’s native HTTP server Deno Deploy Node.js 16.5 and later Cloudflare Workers and Bun. In versions 17.1.5 and below it’s possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers.

Reference

https://github.com/oakserver/oak/commit/b60e60330ef227707c4dc13ef0ea36192d894f44 https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9

CNNVD-202508-817 (Published: 2025-08-09)

Share on: