The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Vulnerable Package issue exists @ Npm-console-browserify-1.1.0 in branch master
The package console-browserify before 1.2.0 is vulnerable to memory leak. The timeEnd() function doesn't delete the label property of times object, persisting the reference and potentially causing a memory leak. Upon continuous usage, it can lead to decreased performace.
Vulnerable Package issue exists @ Npm-console-browserify-1.1.0 in branch master
The package console-browserify before 1.2.0 is vulnerable to memory leak. The timeEnd() function doesn't delete the
labelproperty oftimesobject, persisting the reference and potentially causing a memory leak. Upon continuous usage, it can lead to decreased performace.Namespace: RobertMickleCx Repository: NodeGoat Repository Url: https://github.com/RobertMickleCx/NodeGoat CxAST-Project: RobertMickleCx/NodeGoat CxAST platform scan: 421abb05-2701-4c6b-8cb3-89f91b91b3aa Branch: master Application: NodeGoat Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-401
Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: HIGH
References Other Commit Pull request