Skip to content
This repository has been archived by the owner on Nov 16, 2023. It is now read-only.

Security fix needed - next test/fix-update #25

Closed
DawnmarieDesJardins opened this issue Jul 1, 2019 · 1 comment
Closed

Security fix needed - next test/fix-update #25

DawnmarieDesJardins opened this issue Jul 1, 2019 · 1 comment
Labels
enhancement New feature or request

Comments

@DawnmarieDesJardins
Copy link
Contributor

Potential security vulnerability received. Please review and correct at next test/fix-update:

1 stringstream vulnerability found in …/cli/package-lock.json 11 days ago
Remediation
Upgrade stringstream to version 0.0.6 or later. For example:
"dependencies": {
"stringstream": ">=0.0.6"
}
or…
"devDependencies": {
"stringstream": ">=0.0.6"
}
Always verify the validity and compatibility of suggestions with your codebase.

Details
WS-2018-0103
More information
moderate severity
Vulnerable versions: < 0.0.6
Patched version: 0.0.6
stringstream versions before 0.0.6 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below.

@DawnmarieDesJardins
Copy link
Contributor Author

Closing as addressed in PR #32

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant