rethinkdb@1.11.0-2 vulnerabilities

This package provides the JavaScript driver library for the RethinkDB database server for use in your node application.

Direct Vulnerabilities

Known vulnerabilities in the rethinkdb package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

rethinkdb provides the JavaScript driver library for the RethinkDB database server for use in your node application.

Affected versions of the package are vulnerable to Cross-site Scripting (XSS) due to using a non-cryptographic hash map to store connection IDs, making it possible to easily guess the connection ID. Attackers can use this ID to run queries on the connection setup.

How to fix Cross-site Scripting (XSS)?

Upgrade rethinkdb to version 2.1.0 or higher.

>=1.2.0 <2.1.0
  • M
Information Exposure

rethinkdb provides the JavaScript driver library for the RethinkDB database server for use in your node application. Affected versions of the package use a non-cryptographic hash map to store connection IDs, making the connection ID easy to guess.

How to fix Information Exposure?

Upgrade rethinkdb to version 2.1.0 or higher.

>=1.2.0 <2.1.0