-
Notifications
You must be signed in to change notification settings - Fork 231
Open
Labels
Description
Denial of Service (DoS)
Vulnerable module: mem
Introduced through: qrcode@1.3.2
Detailed paths
Introduced through: waves-client@wavesplatform/WavesGUI#c5cd912aefa6bd3f84a6267f25a2debce0434afa › qrcode@1.3.2 › yargs@8.0.2 › os-locale@2.1.0 › mem@1.1.0
Remediation: Upgrade to qrcode@1.3.3.
Overview
mem is an optimization used to speed up consecutive function calls by caching the result of calls with identical input.
Affected versions of this package are vulnerable to Denial of Service (DoS). Old results were deleted from the cache and could cause a memory leak.