Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

azure/js-jquery may let attackers exhaust server memory

published 5 years ago
Summary

The js-jquery package used in Azure can be tricked into using excessive memory when it receives an unusually large data packet. This can cause the application to slow down or stop working. Update the package to the latest version or apply the vendor’s recommended fix to prevent the slowdown.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
Azure Linux:3 azure js-jquery <= 3.5.0-4
Original advisory text
CVE-2020-36049 affecting package js-jquery 3.5.0-4
socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Timeline
Published8 Jan 2021
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-45030 · OSV
Track software like this
Free during beta