WS-2017-0247 (Low) detected in https://source.codeaurora.org/quic/le/platform/external/node/v0.10.44 - autoclosed #22
Labels
Mend: dependency security vulnerability
Security vulnerability detected by WhiteSource
WS-2017-0247 - Low Severity Vulnerability
Vulnerable Library - https://source.codeaurora.org/quic/le/platform/external/node/v0.10.44
Library home page: https://source.codeaurora.org/quic/le/platform/external/node/
Found in HEAD commit: 57ad34c02d62ce3b8eb4cb40f157e3d1b073d92e
Found in base branch: master
Vulnerable Source Files (0)
Vulnerability Details
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS).
Publish Date: 2017-04-12
URL: WS-2017-0247
CVSS 2 Score Details (3.4)
Base Score Metrics not available
Suggested Fix
Type: Upgrade version
Origin: vercel/ms#89
Release Date: 2017-04-12
Fix Resolution: 2.1.1
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: