We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/serve-favicon/node_modules/ms/package.json
Found in HEAD commit: dc99b958f2b899e32163a797d24f0eb611deaba3
Tiny milisecond conversion utility
Library home page: https://registry.npmjs.org/ms/-/ms-0.7.2.tgz
Dependency Hierarchy:
Found in base branch: main
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS).
Publish Date: 2017-04-12
URL: WS-2017-0247
Base Score Metrics not available
Type: Upgrade version
Origin: vercel/ms#89
Release Date: 2017-04-12
Fix Resolution (ms): 2.0.0
Direct dependency fix Resolution (serve-favicon): 2.4.3
⛑️ Automatic Remediation is available for this issue
⛑️ Automatic Remediation is available for this issue.
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Vulnerable Library - serve-favicon-2.3.2.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/serve-favicon/node_modules/ms/package.json
Found in HEAD commit: dc99b958f2b899e32163a797d24f0eb611deaba3
Vulnerabilities
Details
WS-2017-0247
Vulnerable Library - ms-0.7.2.tgz
Tiny milisecond conversion utility
Library home page: https://registry.npmjs.org/ms/-/ms-0.7.2.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/serve-favicon/node_modules/ms/package.json
Dependency Hierarchy:
Found in HEAD commit: dc99b958f2b899e32163a797d24f0eb611deaba3
Found in base branch: main
Vulnerability Details
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS).
Publish Date: 2017-04-12
URL: WS-2017-0247
CVSS 2 Score Details (3.4)
Base Score Metrics not available
Suggested Fix
Type: Upgrade version
Origin: vercel/ms#89
Release Date: 2017-04-12
Fix Resolution (ms): 2.0.0
Direct dependency fix Resolution (serve-favicon): 2.4.3
⛑️ Automatic Remediation is available for this issue
⛑️ Automatic Remediation is available for this issue.
The text was updated successfully, but these errors were encountered: