Skip to content

Security update of mime? #1123

Closed
Closed
@cordoval

Description

@cordoval
  • Operating System: Docker Alpine
  • Node Version: 8.5.0
  • NPM Version: yarn 1.1.0
  • webpack Version: "webpack": "2.7.0",
  • webpack-dev-server Version: "webpack-dev-server": "2.6.1",
  • This is a bug
  • This is a feature request
  • This is a modification request

Code

  // webpack.config.js

There is a vulnerability on mime that was fixed on latest release broofa/mime@f2d859e#diff-b9cfc7f2cdf78a7f4b91a753d10865a2R47 can we bump up whoever is using it?

┌───────────────┬─────────────────────────────────────────────────────────────────┐
│               │ Regular Expression Denial of Service                            │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ Name          │ mime                                                            │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ CVSS          │ 7.5 (High)                                                      │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ Installed     │ 1.3.4                                                           │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ Vulnerable    │ < 1.4.1 || > 2.0.0 < 2.0.3                                      │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ Patched       │ >= 1.4.1 < 2.0.0 || >= 2.0.3                                    │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ Path          │ system@2.0.0 > webpack-dev-server@2.9.1 > expr… │
├───────────────┼─────────────────────────────────────────────────────────────────┤
│ More Info     │ https://nodesecurity.io/advisories/535                          │
└───────────────┴────────────────────────────────────────────────────────────────
  // additional code, remove if not needed.

Expected Behavior

Actual Behavior

For Bugs; How can we reproduce the behavior?

For Features; What is the motivation and/or use-case for the feature?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions