From d668497a1dff681015254b5f6f3f3fa193019416 Mon Sep 17 00:00:00 2001 From: SemProvoost <27961543+SemProvoost@users.noreply.github.com> Date: Thu, 19 Dec 2024 19:01:19 +0100 Subject: [PATCH] Revert "Merge pull request #1 from AikidoSec/test-pr" This reverts commit 358691c98c4b611e5f6599c85c7aa5a8e18abb92, reversing changes made to 2784dc3f7aacb5259edb91b3b4215ab8ea828921. --- input/new.json | 55 +++++++++++++++++++------------------------------- 1 file changed, 21 insertions(+), 34 deletions(-) diff --git a/input/new.json b/input/new.json index 0336ac7..af0d52f 100644 --- a/input/new.json +++ b/input/new.json @@ -1,35 +1,22 @@ { - "package_name": "axios", - "patch_versions": [ - "0.29.0", - "1.6.4" - ], - "vulnerable_ranges": [ - [ - "0.1.0","0.28.1" - ], - [ - "1.0.0", - "1.6.3" - ] - ], - "cwe": [ - "CWE-1321" - ], - "tldr": "Several security vulnerabilities were quietly patched in `axios` version 1.6.4 and version 0.29.0. Notably, a prototype pollution flaw impacted the `formDataToJSON` function, posing a significant risk. Additionally, a Regular Expression Denial of Service (ReDoS) vulnerability was identified and fixed in the `combineURLs` function.", - "doest_this_affect_me": "You are affected by this flaw if you use the formDataToJSON function. This is more likely to happen in a front-end than in a backend.", - "how_to_fix": "To fix, either freeze the prototype or upgrade to axios 1.6.4 or above.", - "reporter": null, - "vulnerable_to": "Prototype Pollution", - "related_cve_id": "", - "language": "JS", - "severity_class": "HIGH", - "aikido_score": 77, - "changelog": "https://github.com/axios/axios/releases/tag/v1.6.4", - "package_name_alias": null, - "package_wildcard_ends_in": null, - "package_wildcard_contains": null, - "extra_specific_non_vulnerable_versions": null, - "unaffected_distros": null, - "simplify_version_if_has_patch_part": false - } \ No newline at end of file + "package_name": "", + "patch_versions": [], + "vulnerable_ranges": [], + "cwe": [], + "tldr": "", + "doest_this_affect_me": "", + "how_to_fix": "", + "reporter": "", + "vulnerable_to": "", + "related_cve_id": "", + "language": "", + "severity_class": "", + "aikido_score": 0, + "changelog": "", + "package_name_alias": null, + "package_wildcard_ends_in": null, + "package_wildcard_contains": null, + "extra_specific_non_vulnerable_versions": null, + "unaffected_distros": null, + "simplify_version_if_has_patch_part": false +}