Lookup for vulnerable packages by Package URL.
| Purl | pkg:npm/opencc@1.1.2 |
| Type | npm |
| Namespace | |
| Name | opencc |
| Version | 1.1.2 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 1.2.0 |
| Latest_non_vulnerable_version | 1.2.0 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-ua4v-kne1-suas |
| vulnerability_id |
VCID-ua4v-kne1-suas |
| summary |
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2018-16982, GHSA-9qh2-6fxg-9m4g, PYSEC-2018-153
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ua4v-kne1-suas |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:npm/opencc@1.1.2 |