彙總 ecstatic_project 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 輸入驗證問題與拒絕服務 等問題，部分漏洞可能導致 異常行為，並影響 生產負載與軟體部署 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2019-10775 | ecstatic have a denial of service vulnerability. Successful exploitation could lead to crash of an application. | [email protected] | 7.5 | 0.44% | 2020-01-02 | 2024-11-21 |
| CVE-2015-9242 | Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header. | [email protected] | 7.5 | 0.50% | 2018-05-29 | 2024-11-21 |
| CVE-2016-10703 | A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string. | [email protected] | 7.5 | 1.52% | 2017-12-14 | 2026-05-13 |