westonphillips / CheckmarxOnePOV

This repo will be used for Checkmarx ONE POV
MIT License
0 stars 0 forks source link

Cxc7705965-e0f0 @ Npm-@babel/core-7.12.10 #166

Open westonphillips opened 1 year ago

westonphillips commented 1 year ago

Vulnerable Package issue exists @ Npm-@babel/core-7.12.10 in branch main

The @babel/core package versions prior to 7.18.6 were discovered to contain a memory leak vulnerability.

Namespace: westonphillips Repository: CheckmarxOnePOV Repository Url: https://github.com/westonphillips/CheckmarxOnePOV CxAST-Project: westonphillips/CheckmarxOnePOV CxAST platform scan: 6a8170d0-38fa-4efc-81df-42628474102c Branch: main Application: CheckmarxOnePOV Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-401


Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: HIGH Remediation Upgrade Recommendation: 7.18.6


References Issue Pull request Commit Release Note POC/Exploit