pauldcomanici / babel-plugin-auto-logger Goto Github PK
View Code? Open in Web Editor NEWBabel Plugin that will automatically add logging to your JS code
License: MIT License
Babel Plugin that will automatically add logging to your JS code
License: MIT License
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /tmp/ws-scm/babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/ws-scm/babel-plugin-auto-logger/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: 73b5e2f2d43383a8cbc950b500177c161d0861ad
Arbitrary Code Execution vulnerability found in handlebars before 4.5.3. Lookup helper fails to validate templates. Attack may submit templates that execute arbitrary JavaScript in the system.It is due to an incomplete fix for a WS-2019-0331.
Publish Date: 2019-12-05
URL: WS-2019-0332
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1324
Release Date: 2019-12-05
Fix Resolution: handlebars - 4.5.3
Step up your Open Source Security Game with WhiteSource here
Fastest brace expansion for node.js, with the most complete support for the Bash 4.3 braces specification.
Library home page: https://registry.npmjs.org/braces/-/braces-1.8.5.tgz
Path to dependency file: /babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/git/babel-plugin-auto-logger/node_modules/jest-runtime/node_modules/braces/package.json
Dependency Hierarchy:
Found in HEAD commit: 224edd0aa59428f727062a3c989430170056cead
Version of braces prior to 2.3.1 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service.
Publish Date: 2019-03-25
URL: WS-2019-0019
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/786
Release Date: 2019-02-21
Fix Resolution: 2.3.1
Step up your Open Source Security Game with WhiteSource here
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.0.tgz
Path to dependency file: /babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/git/babel-plugin-auto-logger/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: 224edd0aa59428f727062a3c989430170056cead
Versions of handlebars prior to 4.0.14 are vulnerable to Prototype Pollution. Templates may alter an Objects' prototype, thus allowing an attacker to execute arbitrary code on the server.
Publish Date: 2019-04-30
URL: WS-2019-0064
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/755/versions
Release Date: 2019-04-30
Fix Resolution: 1.0.6-2,4.0.14,4.1.2
Step up your Open Source Security Game with WhiteSource here
Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input
Library home page: https://registry.npmjs.org/mem/-/mem-1.1.0.tgz
Path to dependency file: /babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/git/babel-plugin-auto-logger/node_modules/mem/package.json
Dependency Hierarchy:
Found in HEAD commit: fbaffc67b42096310e47c9f846174e9446aa690f
In nodejs-mem before version 4.0.0 there is a memory leak due to old results not being removed from the cache despite reaching maxAge. Exploitation of this can lead to exhaustion of memory and subsequent denial of service.
Publish Date: 2019-05-30
URL: WS-2018-0236
Type: Upgrade version
Origin: https://bugzilla.redhat.com/show_bug.cgi?id=1623744
Release Date: 2019-05-30
Fix Resolution: 4.0.0
Step up your Open Source Security Game with WhiteSource here
Check for state.file.opts.parserOpts.sourceFileName
if the file name couldn't be found.
Change should be applied to https://github.com/darkyndy/babel-plugin-auto-logger/blob/master/src/arguments.js#L36
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /tmp/ws-scm/babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/ws-scm/babel-plugin-auto-logger/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: d8d59aa135694e2dbe20e063a6ed127972900e3d
A Denial of Service vulnerability found in handlebars 4.x before 4.4.5.While processing specially-crafted templates, the parser may be forced into endless loop. Attackers may exhaust system resources.
Publish Date: 2019-12-01
URL: WS-2019-0318
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1300
Release Date: 2019-12-01
Fix Resolution: handlebars - 4.4.5
Step up your Open Source Security Game with WhiteSource here
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /tmp/ws-scm/babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/ws-scm/babel-plugin-auto-logger/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: 73b5e2f2d43383a8cbc950b500177c161d0861ad
Prototype Pollution vulnerability found in handlebars 1.0.6 before 4.5.3. It is possible to add or modify properties to the Object prototype through a malicious template. Attacker may crash the application or execute Arbitrary Code in specific conditions.
Publish Date: 2019-12-05
URL: WS-2019-0333
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1325
Release Date: 2019-12-05
Fix Resolution: handlebars - 4.5.3
Step up your Open Source Security Game with WhiteSource here
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /tmp/ws-scm/babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/ws-scm/babel-plugin-auto-logger/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: d8d59aa135694e2dbe20e063a6ed127972900e3d
handlebars before 4.3.0 is vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Objects' proto and defineGetter properties, which may allow an attacker to execute arbitrary code through crafted payloads.
Publish Date: 2019-10-06
URL: WS-2019-0291
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1164
Release Date: 2019-10-06
Fix Resolution: 4.3.0
Step up your Open Source Security Game with WhiteSource here
Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input
Library home page: https://registry.npmjs.org/mem/-/mem-1.1.0.tgz
Path to dependency file: /babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/git/babel-plugin-auto-logger/node_modules/mem/package.json,/tmp/ws-scm/babel-plugin-auto-logger/node_modules/mem/package.json
Dependency Hierarchy:
Found in HEAD commit: d8d59aa135694e2dbe20e063a6ed127972900e3d
Denial of Service (DoS) vulnerability found in mem before 4.0.0. There is a failure in removal of old values from the cache. As a result, attacker may exhaust the system's memory.
Publish Date: 2019-12-01
URL: WS-2019-0307
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1084
Release Date: 2019-12-01
Fix Resolution: mem - 4.0.0
Step up your Open Source Security Game with WhiteSource here
tar for node
Library home page: https://registry.npmjs.org/tar/-/tar-4.4.1.tgz
Dependency Hierarchy:
Found in HEAD commit: 224edd0aa59428f727062a3c989430170056cead
Versions of node-tar prior to 4.4.2 are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file.
Publish Date: 2019-04-05
URL: WS-2019-0047
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/803
Release Date: 2019-04-05
Fix Resolution: 4.4.2
Step up your Open Source Security Game with WhiteSource here
Handlebars provides the power necessary to let you build semantic templates effectively with no frustration
Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.1.2.tgz
Path to dependency file: /tmp/ws-scm/babel-plugin-auto-logger/package.json
Path to vulnerable library: /tmp/ws-scm/babel-plugin-auto-logger/node_modules/handlebars/package.json
Dependency Hierarchy:
Found in HEAD commit: 73b5e2f2d43383a8cbc950b500177c161d0861ad
Arbitrary Code Execution vulnerability found in handlebars before 4.5.2. Lookup helper fails to validate templates. Attack may submit templates that execute arbitrary JavaScript in the system.
Publish Date: 2019-12-05
URL: WS-2019-0331
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1316
Release Date: 2019-12-05
Fix Resolution: handlebars - 4.5.2
Step up your Open Source Security Game with WhiteSource here
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.