search

westonphillips / CheckmarxOnePOV

This repo will be used for Checkmarx ONE POV
MIT License
0 stars 0 forks source link

CVE-2023-26115 @ Npm-word-wrap-1.2.3 #89

Closed westonphillips closed 1 year ago

westonphillips commented 1 year ago

Vulnerable Package issue exists @ Npm-word-wrap-1.2.3 in branch main

The package word-wrap versions 1.0.0 through 1.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS).

Namespace: westonphillips Repository: CheckmarxOnePOV Repository Url: https://github.com/westonphillips/CheckmarxOnePOV CxAST-Project: westonphillips/CheckmarxOnePOV CxAST platform scan: dfe9066d-c97b-4e43-85c7-29fe7c9fee82 Branch: main Application: CheckmarxOnePOV Severity: MEDIUM State: NOT_IGNORED Status: RECURRENT CWE: CWE-1333

Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: LOW

References Issue Pull request Vulnerable code