Vulnerabilities

 1 via 1 paths

Dependencies

 126

Source

 GitHub

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity

Infinite loop

  • Vulnerable module: file-type
  • Introduced through: eufy-security-client@3.8.0

Detailed paths

  • Introduced through: eufy-security-ws@bropat/eufy-security-ws › eufy-security-client@3.8.0 › image-type@5.2.0 › file-type@18.7.0

Overview

Affected versions of this package are vulnerable to Infinite loop in the FileTypeParser class. This is triggered when the ASF (WMV/WMA) parser receives input including an ASF sub-header with a size value of 0. An attacker can interrupt service with a 55-byte payload.

Remediation

Upgrade file-type to version 21.3.1 or higher.

References

Infinite loop vulnerability report