You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.
CVE-2018-19756 - Medium Severity Vulnerability
Vulnerable Library - expoios/2.11.5
An open-source platform for making universal native apps with React. Expo runs on Android, iOS, and the web.
Library home page: https://github.com/expo/expo.git
Found in HEAD commit: b9b05ec19b201b6092d0f0173431647cecc9a5fe
Library Source Files (409)
* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.
Vulnerability Details
There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service.
Publish Date: 2018-11-30
URL: CVE-2018-19756
CVSS 3 Score Details (5.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: saitoha/libsixel#80
Release Date: 2018-11-30
Fix Resolution: v1.8.3
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: