WS-2018-0100 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

WS-2018-0100 - Medium Severity Vulnerability

Vulnerable Library - concat-with-sourcemaps-1.0.4.tgz

Concatenate file contents with a custom separator and generate a source map

path: /tmp/git/welcome.osweekends.com/node_modules/concat-with-sourcemaps/package.json

Library home page: http://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.4.tgz

Dependency Hierarchy:

• gulp-useref-3.1.3.tgz (Root Library)
  • gulp-concat-2.6.1.tgz
    • ❌ concat-with-sourcemaps-1.0.4.tgz (Vulnerable Library)

Found in HEAD commit: f33e63b349f693c0cfb815c120bbbd381b775421

Vulnerability Details

Versions of concat-with-sourcemaps before 1.0.6 allocates uninitialized Buffers when a number is passed as a separator.

Publish Date: 2018-05-16

URL: WS-2018-0100

CVSS 2 Score Details (6.5)

Base Score Metrics not available

---

Step up your Open Source Security Game with WhiteSource here