Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

braces vulnerability #12481

Open
mark2093 opened this issue May 16, 2024 · 1 comment
Open

braces vulnerability #12481

mark2093 opened this issue May 16, 2024 · 1 comment

Comments

@mark2093
Copy link

Issue description

There is a vulnerability detected (serverless@3.38.0) by Snyk regarding braces

Context

serverless@3.38.0 > @serverless/dashboard-plugin@7.2.3 > chokidar@3.6.0 > braces@3.0.2

braces is a Bash-like brace expansion, implemented in JavaScript.

Affected versions of this package are vulnerable to Uncontrolled resource consumption due to failing to limit the number of characters it can handle, through the parse function. An attacker can cause the application to allocate excessive memory and potentially crash by sending imbalanced braces as input.

@Malashan05
Copy link

+1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants