@asymmetric-effort/nogginlessdom 0.0.16

Direct Vulnerabilities

Known vulnerabilities in the @asymmetric-effort/nogginlessdom package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Directory Traversal @asymmetric-effort/nogginlessdom is an A zero-dependency testing framework with comprehensive test runner, assertions, DOM simulation, and mocking, built on node:test and node:assert Affected versions of this package are vulnerable to Directory Traversal via the `matchFileSnapshot` function when the `filePath` parameter is not validated. An attacker can write arbitrary files to any location on the filesystem accessible by the process by supplying crafted file paths, including those with path traversal sequences or absolute paths. This is only exploitable if snapshot update mode is enabled (such as by setting the `UPDATE_SNAPSHOTS` environment variable or calling `setUpdateMode('all')`). How to fix Directory Traversal? Upgrade `@asymmetric-effort/nogginlessdom` to version 0.0.22 or higher.	<0.0.22
M Regular Expression Denial of Service (ReDoS) @asymmetric-effort/nogginlessdom is an A zero-dependency testing framework with comprehensive test runner, assertions, DOM simulation, and mocking, built on node:test and node:assert Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the `checkValidity` function. An attacker can cause excessive resource consumption and freeze the event loop by supplying a crafted regular expression pattern with nested quantifiers. How to fix Regular Expression Denial of Service (ReDoS)? Upgrade `@asymmetric-effort/nogginlessdom` to version 0.0.22 or higher.	<0.0.22

Vulnerability

Vulnerable Version

Directory Traversal

@asymmetric-effort/nogginlessdom is an A zero-dependency testing framework with comprehensive test runner, assertions, DOM simulation, and mocking, built on node:test and node:assert

Affected versions of this package are vulnerable to Directory Traversal via the matchFileSnapshot function when the filePath parameter is not validated. An attacker can write arbitrary files to any location on the filesystem accessible by the process by supplying crafted file paths, including those with path traversal sequences or absolute paths. This is only exploitable if snapshot update mode is enabled (such as by setting the UPDATE_SNAPSHOTS environment variable or calling setUpdateMode('all')).

How to fix Directory Traversal?

Upgrade @asymmetric-effort/nogginlessdom to version 0.0.22 or higher.

<0.0.22

Regular Expression Denial of Service (ReDoS)

@asymmetric-effort/nogginlessdom is an A zero-dependency testing framework with comprehensive test runner, assertions, DOM simulation, and mocking, built on node:test and node:assert

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the checkValidity function. An attacker can cause excessive resource consumption and freeze the event loop by supplying a crafted regular expression pattern with nested quantifiers.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade @asymmetric-effort/nogginlessdom to version 0.0.22 or higher.

<0.0.22

@asymmetric-effort/nogginlessdom@0.0.16

A zero-dependency testing framework with comprehensive test runner, assertions, DOM simulation, and mocking, built on node:test and node:assert

latest version

latest non vulnerable version

first published

latest version published

licenses detected

Direct Vulnerabilities

Fix vulnerabilities automatically