Skip to content
OpenAdvisories

Package · npm

openwhisk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-53mj-mc38-q894

    Remote Memory Exposure in openwhisk

    Versions of `openwhisk` before 3.3.1 are vulnerable to remote memory exposure. When a number is passed to `api_key`, affected versions of `openwhisk` allocate an uninitialized buffer and send that over network in Authorization header (base64-encoded). Proof o…

    openwhisk npm