You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In nodejs-mem before version 4.0.0 there is a memory leak due to old results not being removed from the cache despite reaching maxAge. Exploitation of this can lead to exhaustion of memory and subsequent denial of service.
mend-bolt-for-githubbot
changed the title
WS-2018-0236 (Medium) detected in mem-1.1.0.tgz
WS-2018-0236 (Medium) detected in mem-1.1.0.tgz - autoclosed
Jun 8, 2022
✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
WS-2018-0236 - Medium Severity Vulnerability
Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input
Library home page: https://registry.npmjs.org/mem/-/mem-1.1.0.tgz
Path to dependency file: shipengine-request/package.json
Path to vulnerable library: shipengine-request/node_modules/npm/node_modules/mem/package.json
Dependency Hierarchy:
Found in HEAD commit: d8a1f6ca5adcdcd9d8d763995b9640d6ec31364b
In nodejs-mem before version 4.0.0 there is a memory leak due to old results not being removed from the cache despite reaching maxAge. Exploitation of this can lead to exhaustion of memory and subsequent denial of service.
Publish Date: 2018-08-27
URL: WS-2018-0236
Base Score Metrics not available
Type: Upgrade version
Origin: https://bugzilla.redhat.com/show_bug.cgi?id=1623744
Release Date: 2019-05-30
Fix Resolution: 4.0.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: