search

matrixknight / BikeSharing360_Websites

BikeSharing360 Demo Apps Websites
Mozilla Public License 2.0
0 stars 0 forks source link

WS-2022-0170 (High) detected in jquery-validation-1.19.3.tgz #31

Open mend-bolt-for-github[bot] opened 2 years ago

mend-bolt-for-github[bot] commented 2 years ago

WS-2022-0170 - High Severity Vulnerability

Vulnerable Library - jquery-validation-1.19.3.tgz

Client-side form validation made easy

Library home page: https://registry.npmjs.org/jquery-validation/-/jquery-validation-1.19.3.tgz

Path to dependency file: /PrivateWebSite/src/BikeSharing_Private_Web_Site/package.json

Path to vulnerable library: /PrivateWebSite/src/BikeSharing_Private_Web_Site/node_modules/jquery-validation/package.json

Dependency Hierarchy: - :x: **jquery-validation-1.19.3.tgz** (Vulnerable Library)

Found in HEAD commit: bc963f1400932ce23ff4b5d63778a2e8b695f9a6

Found in base branch: master

Vulnerability Details

Redos in jquery-validation before 1.19.5

Publish Date: 2022-07-06

URL: WS-2022-0170

CVSS 3 Score Details (7.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/advisories/GHSA-ffmh-x56j-9rc3

Release Date: 2022-07-06

Fix Resolution: 1.19.5

Step up your Open Source Security Game with Mend here