Vulnerabilities |
3 via 3 paths |
|---|---|
Dependencies |
52 |
Source |
GitHub |
Find, fix and prevent vulnerabilities in your code.
high severity
- Vulnerable module: http-cache-semantics
- Introduced through: got@11.8.6
Detailed paths
-
Introduced through: @salesforce/templates@forcedotcom/salesforcedx-templates › got@11.8.6 › cacheable-request@7.0.4 › http-cache-semantics@4.3.0
Overview
Affected versions of this package are vulnerable to Improper Authorization via improper validation of security-zeroed cache entries when processing client max-stale directives. An unauthenticated attacker can request the same URL with a large max-stale value to retrieve cached responses belonging to other users, including Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons.
Remediation
There is no fixed version for http-cache-semantics.
References
high severity
- Vulnerable module: http-cache-semantics
- Introduced through: got@11.8.6
Detailed paths
-
Introduced through: @salesforce/templates@forcedotcom/salesforcedx-templates › got@11.8.6 › cacheable-request@7.0.4 › http-cache-semantics@4.3.0
Overview
Affected versions of this package are vulnerable to Origin Validation Error via the _varyMatches() function, which fails to properly handle Vary: * (wildcard) headers due to byte-for-byte string comparison. An attacker can request URLs previously fetched by other clients to receive cached responses intended for different users, disclosing sensitive information across clients. The Vary: * directive signals that a response is uncacheable for any other request, but the flawed comparison allows the wildcard to be bypassed, enabling cross-client cache disclosure.
Remediation
There is no fixed version for http-cache-semantics.
References
medium severity
new
- Vulnerable module: minimatch
- Introduced through: ejs@3.1.10
Detailed paths
-
Introduced through: @salesforce/templates@forcedotcom/salesforcedx-templates › ejs@3.1.10 › jake@10.9.4 › filelist@1.0.6 › minimatch@5.1.9
Overview
minimatch is a minimal matching utility.
Affected versions of this package are vulnerable to Asymmetric Resource Consumption (Amplification) in the firstPhasePreProcess method, where the **/.. transform clones a globParts entry and pushes the clone back onto the same array inside a do...while (didSomething) fixpoint loop. An attacker can exhaust CPU and memory by supplying a glob pattern whose **/.. sequences regenerate entries during preprocessing, which secondPhasePreProcess then compares in an O(n^2) pairwise partsMatch pass over the expanded set. Exploitation requires the pattern to be parsed with optimizationLevel set to 2 or higher.
Remediation
Upgrade minimatch to version 11.0.1 or higher.