Skip to content

Cxda14f253-4e52 @ Npm-bluebird-3.5.0 #405

@cx-boris-goman

Description

@cx-boris-goman

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about Cxda14f253-4e52
Checkmarx Project: cx-boris-goman/AutoPR
Repository URL: https://github.com/cx-boris-goman/AutoPR
Branch: kid
Scan ID: bfaa74de-6358-4edb-a528-1d669bc0863c


The package bluebird is vulnerable to memory leak, when running the function longStackTraces() with the flag --expose_gc. This causes a significant increase in the memory usage, affecting the server's availability.


Additional Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: NONE
Availability impact: LOW

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions