rethinkdb@1.12.0-0 vulnerabilities
This package provides the JavaScript driver library for the RethinkDB database server for use in your node application.
-
latest version
2.4.2
-
latest non vulnerable version
-
first published
11 years ago
-
latest version published
4 years ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the rethinkdb package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of the package are vulnerable to Cross-site Scripting (XSS) due to using a non-cryptographic hash map to store connection IDs, making it possible to easily guess the connection ID. Attackers can use this ID to run queries on the connection setup. How to fix Cross-site Scripting (XSS)? Upgrade |
>=1.2.0 <2.1.0
|
How to fix Information Exposure? Upgrade |
>=1.2.0 <2.1.0
|