westonphillips / CheckmarxOnePOV

This repo will be used for Checkmarx ONE POV
MIT License
0 stars 0 forks source link

Cx65603961-769c @ Npm-debug-3.1.0 #113

Open westonphillips opened 1 year ago

westonphillips commented 1 year ago

Vulnerable Package issue exists @ Npm-debug-3.1.0 in branch main

The package debug is vulnerable to memory leakage when instance is created inside a function. The function debug in the file common.js does not free up used memory unless there's a call to destroy() function. This affects the availability.

Namespace: westonphillips Repository: CheckmarxOnePOV Repository Url: https://github.com/westonphillips/CheckmarxOnePOV CxAST-Project: westonphillips/CheckmarxOnePOV CxAST platform scan: 6a8170d0-38fa-4efc-81df-42628474102c Branch: main Application: CheckmarxOnePOV Severity: MEDIUM State: NOT_IGNORED Status: RECURRENT CWE: CWE-401


Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: LOW Remediation Upgrade Recommendation: 3.2.7


References Issue Pull request Pull request