Mime vulnerability blocking merges to MCS
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Jdlrobson
	Sep 28 2017, 2:39 PM

Description

21:37:25 (+) 1 vulnerabilities found
21:37:25 ┌───────────────┬─────────────────────────────────────────────────────────────────┐
21:37:25 │ │ Regular Expression Denial of Service │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ Name │ mime │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ CVSS │ 7.5 (High) │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ Installed │ 1.3.4 │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ Vulnerable │ < 1.4.1 || > 2.0.0 < 2.0.3 │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ Patched │ >= 1.4.1 < 2.0.0 || >= 2.0.3 │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ Path │ service-mobileapp-node@0.3.0 > express@4.15.5 > send@0.15.6 > … │
21:37:25 ├───────────────┼─────────────────────────────────────────────────────────────────┤
21:37:25 │ More Info │ https://nodesecurity.io/advisories/535 │
21:37:25 └───────────────┴─────────────────────────────────────────────────────────────────┘
21:37:25

Details

	Subject	Repo	Branch	Lines +/-
	Update express to 4.16.0	mediawiki/services/mobileapps	master	+1 -1

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	None	T169242 Develop Page Content Service for Reading Clients
Resolved	None	T177425 Develop General Layer of PCS
Resolved	• Jhernandez	T177426 Develop structured JSON APIs for general consumption
Resolved	• Mholloway	T177431 Develop a Summary JSON API
Resolved	Dereckson	T68374 Enable Hovercards on se.wikimedia.org (Swedish chapter wiki)
Resolved	Jdlrobson	T70860 [GOAL] Graduate Page Previews feature (Popups extension) out of Beta Feature
Resolved	ovasileva	T154635 [EPIC] Deploy page previews to English and German Wikipedia
Resolved	ovasileva	T192622 [EPIC] Page previews post-deploy cleanup
Resolved	Jdlrobson	T173952 Remove A/B testing instrumentation code
Duplicate	None	T167433 Switch all projects to the new (and yet to be built) summary-html endpoint for page previews
Duplicate	None	T167429 Make enwiki and dewiki fetch previews from the summary-html RESTBase endpoint
Resolved	ovasileva	T165018 Page previews can consume new summary-HTML endpoint
Declined	Jdlrobson	T111329 [GOAL] Page previews on mobileweb
Resolved	Jdlrobson	T164010 [EPIC] Strengthen the APIs we provide in reading web maintained extensions
Resolved	ovasileva	T113094 [EPIC] The Page Summary API needs to provide useful content for the majority of articles
Resolved	• bearND	T175286 Do side by side comparison of old summary endpoint against new summary endpoint
Resolved	• Mholloway	T176974 Mime vulnerability blocking merges to MCS