This repository has been archived by the owner on Nov 21, 2022. It is now read-only.
WS-2020-0127 (Medium) detected in npm-registry-fetch-4.0.3.tgz - autoclosed #39
Labels
security vulnerability
Security vulnerability detected by WhiteSource
WS-2020-0127 - Medium Severity Vulnerability
Vulnerable Library - npm-registry-fetch-4.0.3.tgz
Fetch-based http client for use with npm registry APIs
Library home page: https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.3.tgz
Path to dependency file: /WFHResourcesApp/package.json
Path to vulnerable library: /WFHResourcesApp/node_modules/npm-registry-fetch/package.json
Dependency Hierarchy:
Found in HEAD commit: 11f241508ba245a0e272c42d9290fc938b0d20ca
Found in base branch: master
Vulnerability Details
npm-registry-fetch before 4.0.5 and 8.1.1 is vulnerable to an information exposure vulnerability through log files.
Publish Date: 2020-07-07
URL: WS-2020-0127
CVSS 3 Score Details (5.3)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1544
Release Date: 2020-07-07
Fix Resolution (npm-registry-fetch): 4.0.5
Direct dependency fix Resolution (@angular/cli): 9.0.7
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: