Skip to main content

Test Results

newrelic/nr1-apdex-optimizer

Vulnerabilities

 1 via 1 paths

Dependencies

 56

Source

 GitHub

Commit

 5aac10fd

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity

Open Redirect

  • Vulnerable module: got
  • Introduced through: @newrelic/nr1-community@1.2.0

Detailed paths

  • Introduced through: nr1-apdex-optimizer@newrelic/nr1-apdex-optimizer#5aac10fd12f54155e2eecec4812506bdc007939d › @newrelic/nr1-community@1.2.0 › nice-color-palettes@3.0.0 › got@9.6.0

Overview

Affected versions of this package are vulnerable to Open Redirect due to missing verification of requested URLs. It allowed a victim to be redirected to a UNIX socket.

Remediation

Upgrade got to version 11.8.5, 12.1.0 or higher.

References

Open Redirect vulnerability report