org.webjars.bower:thrift@0.10.0 vulnerabilities
-
latest version
0.10.0
-
first published
6 years ago
-
latest version published
6 years ago
-
licenses detected
- [0.10.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.bower:thrift package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
org.webjars.bower:thrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Denial of Service (DoS). A server or client may run into an endless loop when fed with specific input data. Note: This issue was found to be partially fixed within version How to fix Denial of Service (DoS)? A fix was pushed into the |
(,)
|
org.webjars.bower:thrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Improper Access Control. A remote user had the ability to access files outside the set How to fix Improper Access Control? There is no fixed version for |
[0,)
|