CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

CVE-2018-7560: Improper Input Validation

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

PT-2018-18155

Name of the Vulnerable Software and Affected Versions aws-lambda-multipart-parser versions prior to 0.1.2 Description The issue is a Regular Expression Denial of Service ReDoS problem that can be triggered by a crafted multipart/form-data boundary string. This can affect the index.js file in the...

Conversations on Securing Microservices, API Gateways and Containers

Last month, I met James name changed while at AWS Summit in London. As I was managing Imperva's booth, he walked over to me with a query about what we do. A conversation ensued and James described his company for me. They were into financial-legal intermediation between underwriters, insurance...

com.piketec.jenkins.plugins:piketec-tpt (6.3), com.switchfly:gitlab-merge-request-jenkins (2.0.0) +19 more potentially affected by CVE-2015-7539 via org.jenkins-ci.main:jenkins-core (>=1.626, <=1.639)

org.jenkins-ci.main:jenkins-core MAVEN version =1.626, =0.3, =1.2, =1.1.2, =1.626, =1.626, =1.0, =1.1.0, =0.1, =0.2, =0.1, =2.4, =2.6 - org.jenkins-ci.plugins:pipeline-editor 1.0-alpha-1 and more Source cves: CVE-2015-7539 Source advisory: MEND:CVE-2015-7539...