Описание
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-cipher-base | fixed | 1.0.6-1 | package |
Примечания
https://github.com/browserify/cipher-base/security/advisories/GHSA-cpq7-6gpm-g9rc
https://github.com/browserify/cipher-base/pull/23
Fixed by: https://github.com/browserify/cipher-base/commit/8fd136432ca298a664f5637629cf2b42a6c7f294 (v1.0.5)
EPSS
Связанные уязвимости
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
cipher-base is missing type checks, leading to hash rewind and passing on crafted data
Уязвимость пакета cipher-base программной платформы Node.js, позволяющая нарушителю выполнить произвольный код
EPSS