Vulnerabilities

 1 via 1 paths

Dependencies

 48

Source

 GitHub

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity
new

Memory Allocation with Excessive Size Value

  • Vulnerable module: js-beautify
  • Introduced through: js-beautify@1.15.4

Detailed paths

  • Introduced through: hapi-starter@amoreaux/hapi-cli › js-beautify@1.15.4

Overview

js-beautify is a reformat and re-indent bookmarklets, ugly JavaScript, unpack scripts packed by Dean Edward’s popular packer, as well as partly deobfuscate scripts processed by the npm package "javascript-obfuscator".

Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via an unknown function, allowing a remote attacker to trigger uncontrolled memory allocation by sending a manipulated input, resulting in resource exhaustion.

Remediation

There is no fixed version for js-beautify.

References

Memory Allocation with Excessive Size Value vulnerability report