Orta CVSS 5.5
CVE-2022-36313: File-type: güvenlik açığı
Açıklama (NVD)
An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack.
Özet bilgiler
- Ürün
- Sindresorhus File-type
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %0,41 (yüzdelik 35)
- CWE
- CWE-835
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sindresorhus-file-type | — | — | 16.5.4 |
| sindresorhus-file-type | 17.0.0 | — | 17.1.3 |