REDHAT-BUG-1944827: High severity npm netmask vulnerability

Published Mar 30, 2021

Updated

netmask npm package is vulnerable to octal input data. This may lead to server-side request forgery, remote file inclusion, local file inclusion, and other vulnerabilities.

Reference: https://github.com/advisories/GHSA-pch5-whg9-qr2r

Affected Software

1 affected component

npm netmask

Event History

Mar 30, 2021

Data Sourced

via Red Hat·06:05 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1944827?

The severity of REDHAT-BUG-1944827 is high due to potential server-side request forgery and file inclusion vulnerabilities.

How do I fix REDHAT-BUG-1944827?

To fix REDHAT-BUG-1944827, update the netmask npm package to the latest version where this vulnerability is patched.

What vulnerabilities are associated with REDHAT-BUG-1944827?

REDHAT-BUG-1944827 is associated with vulnerabilities such as server-side request forgery, remote file inclusion, and local file inclusion.

Which software is affected by REDHAT-BUG-1944827?

The netmask npm package is the primary software affected by REDHAT-BUG-1944827.

What type of input causes the vulnerability in REDHAT-BUG-1944827?

The vulnerability in REDHAT-BUG-1944827 is caused by octal input data.