Skip to content
OpenAdvisories

Archive

5 June 2019

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    Regular Expression Denial of Service in clean-css

    Version of `clean-css` prior to 4.1.11 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial …

  • Low 3.5

    Sensitive Data Exposure in sequelize-cli

    Versions of `sequelize-cli` prior to 5.5.0 are vulnerable to Sensitive Data Exposure. The function `filteredURL()` does not properly sanitize the `config.password` value which may cause passwords with special characters to be logged in plain text. ## Recommen…