PolymathNetwork / polymath.js

10 stars 6 forks source link

Denial of Service (DoS) #22

Open larrycameron80 opened 5 years ago

larrycameron80 commented 5 years ago

Denial of Service (DoS) Vulnerable module: mem Introduced through: polymath-core@1.4.0 Detailed paths Introduced through: polymathjs@PolymathNetwork/polymath.js#9d79f0155704c1c355182f61c405f9c1923dc52a › polymath-core@1.4.0 › ethereumjs-testrpc@6.0.3 › webpack@3.12.0 › yargs@8.0.2 › os-locale@2.1.0 › mem@1.1.0 Overview mem is an optimization used to speed up consecutive function calls by caching the result of calls with identical input.

Affected versions of this package are vulnerable to Denial of Service (DoS). Old results were deleted from the cache and could cause a memory leak.