pg-infosec

Results 24 comments of pg-infosec

Compatible to render multiple Docx-viewer

Vulnerable Package: webpack-dev-server Affected Range: < 3.1.11 Fixed Version: 3.1.11 Related CVE: CVE-2018-14732 Severity: HIGH More Information: Please consider upgrading webpack-dev-server to prevent deploying vulnerable code into production. For more...

Compatible to render multiple Docx-viewer

Vulnerable Package: three Affected Range: < 0.125.0 Fixed Version: 0.125.0 Related CVE: CVE-2020-28496 Severity: HIGH More Information: Please consider upgrading three to prevent deploying vulnerable code into production. For more...

Compatible to render multiple Docx-viewer

Vulnerable Package: xlsx Affected Range: < 0.17.0 Fixed Version: 0.17.0 Related CVE: CVE-2021-32013 Severity: MODERATE More Information: Please consider upgrading xlsx to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: mime Affected Range: < 1.4.1 Fixed Version: 1.4.1 Related CVE: CVE-2017-16138 Severity: HIGH More Information: Please consider upgrading mime to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: lodash Affected Range: < 4.17.5 Fixed Version: 4.17.5 Related CVE: CVE-2018-3721 Severity: MODERATE More Information: Please consider upgrading lodash to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: webpack-dev-server Affected Range: < 3.1.11 Fixed Version: 3.1.11 Related CVE: CVE-2018-14732 Severity: LOW More Information: Please consider upgrading webpack-dev-server to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: lodash Affected Range: < 4.17.11 Fixed Version: 4.17.11 Related CVE: CVE-2018-16487 Severity: LOW More Information: Please consider upgrading lodash to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: tar Affected Range: < 2.2.2 Fixed Version: 2.2.2 Related CVE: CVE-2018-20834 Severity: HIGH More Information: Please consider upgrading tar to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: fstream Affected Range: < 1.0.12 Fixed Version: 1.0.12 Related CVE: WS-2019-0100 Severity: MODERATE More Information: Please consider upgrading fstream to prevent deploying vulnerable code into production. For more...

update mammoth version to avoid vuln

Vulnerable Package: js-yaml Affected Range: < 3.13.1 Fixed Version: 3.13.1 Related CVE: WS-2019-0063 Severity: HIGH More Information: Please consider upgrading js-yaml to prevent deploying vulnerable code into production. For more...