Vulnerabilities

 1 via 1 paths

Dependencies

 6

Source

 GitHub

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity
new

Uncaught Exception

  • Vulnerable module: joi
  • Introduced through: joi@17.9.2

Detailed paths

  • Introduced through: hapi-pulse@futurestudio/hapi-pulse › joi@17.9.2
    Remediation: Upgrade to joi@18.2.1.

Overview

Affected versions of this package are vulnerable to Uncaught Exception through the link validation. An attacker can cause the application to crash or become unresponsive by submitting deeply nested input that triggers an unhandled RangeError exception. This is only exploitable if input validation is performed without proper exception handling (such as missing try/catch blocks).

Remediation

Upgrade joi to version 18.2.1 or higher.

References

Uncaught Exception vulnerability report