WS-2018-0148 (Low) detected in utile-0.2.1.tgz

WS-2018-0148 - Low Severity Vulnerability

Vulnerable Library - utile-0.2.1.tgz

A drop-in replacement for `util` with some additional advantageous functions

Path to dependency file: /forever/package.json

Path to vulnerable library: /forever/node_modules/utile/package.json

Dependency Hierarchy:

Vulnerability Details

utile allocates uninitialized Buffers when number is passed in input.
Before version 0.3.0

Publish Date: 2018-07-16

CVSS 2 Score Details (1.8)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Release Date: 2018-01-16

Fix Resolution: 0.3.0

Step up your Open Source Security Game with WhiteSource here