decode-uri-component vulnerable to Denial of Service (DoS) #17

New Issue

2022-11-29T04:42:18Z

argoyle commented

2022-11-29 04:42:18 +00:00

(Migrated from gitlab.com)

⚠️ dependabot-gitlab has detected security vulnerability for decode-uri-component in path: /, manifest_file: /package.json but was unable to update it! ⚠️

https://github.com/advisories/GHSA-w573-4hg7-7wgq

Package	Severity	Affected versions	Patched versions	IDs
decode-uri-component (NPM)	LOW	<= 0.2.0		`GHSA-w573-4hg7-7wgq`,`CVE-2022-38900`

Description

decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.

References

⚠️ `dependabot-gitlab` has detected security vulnerability for `decode-uri-component` in path: `/`, manifest_file: `/package.json` but was unable to update it! ⚠️ * https://github.com/advisories/GHSA-w573-4hg7-7wgq | Package | Severity | Affected versions | Patched versions | IDs | |----------------------------|----------|-------------------|------------------|----------------------------------------| | decode-uri-component (NPM) | LOW | <= 0.2.0 | | `GHSA-w573-4hg7-7wgq`,`CVE-2022-38900` | # Description decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. # References * https://nvd.nist.gov/vuln/detail/CVE-2022-38900 * https://github.com/SamVerschueren/decode-uri-component/issues/5 * https://github.com/sindresorhus/query-string/issues/345 * https://github.com/advisories/GHSA-w573-4hg7-7wgq

argoyle (Migrated from gitlab.com) closed this issue

2022-12-05 12:58:24 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: dancefinder/dancefinder-app#17