| Package | Affected versions | Patched versions |
|---|---|---|
| graalvm | = 20.3.3= 21.2.0 | |
| sinec infrastructure network services | < 1.0.1.1 | 1.0.1.1 |
| ssri | ≥ 5.2.2, < 6.0.2≥ 7.0.0, < 8.0.1 | 6.0.28.0.1 |
| ssri | ≥ 5.2.2, < 6.0.2≥ 7.0.0, < 7.1.1≥ 8.0.0, < 8.0.1 | 6.0.27.1.18.0.1 |
npm ssri 5.2.2-6.0.1 and 7.0.0-8.0.0, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free