You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to dependency file: /Express-Dev-Env/package.json
Path to vulnerable library: /tmp/git/Express-Dev-Env/node_modules/js-yaml/package.json
Dependency Hierarchy:
eslint-5.10.0.tgz (Root Library)
❌ js-yaml-3.12.0.tgz (Vulnerable Library)
Vulnerability Details
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
WS-2019-0032 - Medium Severity Vulnerability
YAML 1.2 parser and serializer
Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.0.tgz
Path to dependency file: /Express-Dev-Env/package.json
Path to vulnerable library: /tmp/git/Express-Dev-Env/node_modules/js-yaml/package.json
Dependency Hierarchy:
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
Publish Date: 2019-03-26
URL: WS-2019-0032
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/788/versions
Release Date: 2019-03-26
Fix Resolution: 3.13.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: