Fix CVE–2022–38900

[debricked]

CVE–2022–38900

Vulnerability details

Description

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

NVD

decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.

GitHub

decode-uri-component vulnerable to Denial of Service (DoS)

decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.

CVSS details - 7.5

 

CVSS3 metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

References

    NVD - CVE-2022-38900
    decode-uri-component vulnerable to Denial of Service (DoS) · CVE-2022-38900 · GitHub Advisory Database · GitHub
    TypeError: decodeComponents(...).join is not a function · Issue #345 · sindresorhus/query-string · GitHub
    TypeError: decodeComponents(...).join is not a function · Issue #5 · SamVerschueren/decode-uri-component · GitHub
    Release v0.2.1 · SamVerschueren/decode-uri-component · GitHub
    Fix issue where decode throws - fixes #6 · SamVerschueren/decode-uri-component@746ca5d · GitHub

 

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE