CVE-2019-10775

Name of the Vulnerable Software and Affected Versions ecstatic versions prior to 4.1.2 ecstatic versions prior to 3.3.2 ecstatic versions prior to 2.2.2

Description The issue allows for a denial of service, potentially causing an application to crash. It is also related to an Open Redirect vulnerability, where the package fails to validate redirects. This failure enables attackers to craft requests that result in an HTTP 301 redirect to any other domain.

Recommendations If using ecstatic 4.x, upgrade to 4.1.2 or later. If using ecstatic 3.x, upgrade to 3.3.2 or later. If using ecstatic 2.x, upgrade to 2.2.2 or later.