search

TIBCOSoftware / TCSTK-custom-form-app-plugin

TIBCO Cloud™ Composer - Custom Form App Plugin
https://tibcosoftware.github.io/TCSToolkit/
Other
1 stars 1 forks source link

WS-2019-0100 (Medium) detected in fstream-1.0.11.tgz #2

Closed mend-for-github-com[bot] closed 4 years ago

mend-for-github-com[bot] commented 5 years ago

WS-2019-0100 - Medium Severity Vulnerability

Vulnerable Library - fstream-1.0.11.tgz

Advanced file system stream things

Library home page: https://registry.npmjs.org/fstream/-/fstream-1.0.11.tgz

Path to dependency file: /TCSTK-custom-form-app-plugin/package.json

Path to vulnerable library: /tmp/git/TCSTK-custom-form-app-plugin/node_modules/fstream/package.json

Dependency Hierarchy: - build-angular-0.13.9.tgz (Root Library) - node-sass-4.12.0.tgz - node-gyp-3.8.0.tgz - :x: **fstream-1.0.11.tgz** (Vulnerable Library)

Vulnerability Details

Versions of fstream prior to 1.0.12 are vulnerable to Arbitrary File Overwrite.

Publish Date: 2019-05-23

URL: WS-2019-0100

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://www.npmjs.com/advisories/886

Release Date: 2019-05-23

Fix Resolution: 1.0.12

Step up your Open Source Security Game with WhiteSource here