Skip to content

[BUG] Denial of Service (DoS) #1652

@larrycameron80

Description

@larrycameron80

Denial of Service (DoS)
Vulnerable module: mem
Introduced through: qrcode@1.3.2
Detailed paths
Introduced through: waves-client@wavesplatform/WavesGUI#c5cd912aefa6bd3f84a6267f25a2debce0434afa › qrcode@1.3.2 › yargs@8.0.2 › os-locale@2.1.0 › mem@1.1.0
Remediation: Upgrade to qrcode@1.3.3.
Overview
mem is an optimization used to speed up consecutive function calls by caching the result of calls with identical input.

Affected versions of this package are vulnerable to Denial of Service (DoS). Old results were deleted from the cache and could cause a memory leak.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions