@ustack/egg-ue@0.5.0

Vulnerabilities

 2 via 2 paths

Dependencies

 84

Source

 npm
Find a vulnerability free version of @ustack/egg-ue | View @ustack/egg-ue package health on Snyk Advisor

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
  • 1
Status
  • 2
  • 0
  • 0

high severity

Insecure Encryption

  • Vulnerable module: bcrypt
  • Introduced through: bcrypt@3.0.8

Detailed paths

  • Introduced through: @ustack/egg-ue@0.5.0 › bcrypt@3.0.8
    Remediation: Upgrade to bcrypt@5.0.0.

Overview

bcrypt is an A library to help you hash passwords.

Affected versions of this package are vulnerable to Insecure Encryption. Data is truncated wrong when its length is greater than 255 bytes.

Remediation

Upgrade bcrypt to version 5.0.0 or higher.

References

Insecure Encryption vulnerability report

medium severity

Cryptographic Issues

  • Vulnerable module: bcrypt
  • Introduced through: bcrypt@3.0.8

Detailed paths

  • Introduced through: @ustack/egg-ue@0.5.0 › bcrypt@3.0.8
    Remediation: Upgrade to bcrypt@5.0.0.

Overview

bcrypt is an A library to help you hash passwords.

Affected versions of this package are vulnerable to Cryptographic Issues. When hashing a password containing an ASCII NUL character, that character acts as the string terminator. Any following characters are ignored.

Remediation

Upgrade bcrypt to version 5.0.0 or higher.

References

Cryptographic Issues vulnerability report