CVE-2021-29057

Name of the Vulnerable Software and Affected Versions SUCHMOKUO node-worker-threads-pool version 1.4.3

Description An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool, allowing attackers to cause a denial of service. This issue can be mitigated by manually creating a timeout.

Recommendations For version 1.4.3, consider creating a timeout when using the StaticPool to mitigate the risk of denial of service, for example by using the setTimeout method on the executor, as shown in the provided example code.