pp253 / nthu-select-courses

重新設計的選課系統,目標是提供清爽、直覺和方便的選課系統!
https://nthu-courses.github.io
Apache License 2.0
8 stars 1 forks source link

CVE-2018-19839 Medium Severity Vulnerability detected by WhiteSource #23

Open mend-bolt-for-github[bot] opened 5 years ago

mend-bolt-for-github[bot] commented 5 years ago

CVE-2018-19839 - Medium Severity Vulnerability

Vulnerable Library - openalprv2.3.0

Automatic License Plate Recognition library

Library home page: https://github.com/openalpr/openalpr.git

Library Source Files (3)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

- /nthu-select-courses/node_modules/node-sass/src/libsass/src/utf8/core.h - /nthu-select-courses/node_modules/node-sass/src/libsass/src/utf8/checked.h - /nthu-select-courses/node_modules/node-sass/src/libsass/src/utf8/unchecked.h

Vulnerability Details

In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.

Publish Date: 2018-12-04

URL: CVE-2018-19839

CVSS 2 Score Details (5.3)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19839

Fix Resolution: 3.5.5


Step up your Open Source Security Game with WhiteSource here