Open RobertMickleCx opened 1 year ago
Vulnerable Package issue exists @ Npm-uglify-js-2.4.24 in branch master
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in uglify-js. Malicious inputs can be passed into the parse() method.
Namespace: RobertMickleCx Repository: NodeGoat Repository Url: https://github.com/RobertMickleCx/NodeGoat CxAST-Project: RobertMickleCx/NodeGoat CxAST platform scan: 3f4864fd-127b-412c-8cca-4b4873ce2f29 Branch: master Application: NodeGoat Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-400
Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: HIGH
References Advisory Issue Commit Commit Advisory
Vulnerable Package issue exists @ Npm-uglify-js-2.4.24 in branch master
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in uglify-js. Malicious inputs can be passed into the parse() method.
Namespace: RobertMickleCx Repository: NodeGoat Repository Url: https://github.com/RobertMickleCx/NodeGoat CxAST-Project: RobertMickleCx/NodeGoat CxAST platform scan: 3f4864fd-127b-412c-8cca-4b4873ce2f29 Branch: master Application: NodeGoat Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-400
Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: HIGH
References Advisory Issue Commit Commit Advisory