This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.
Version Details and Security Vulnerabilities
📦
@alicloud/credentials
1.0.2
Comparision Betweeen 1.0.2 and 1.0.1
Identify the differences between the current version of the package and the previous one.
Version
Dependencies
5
5
Dev Dependencies
8
0
Peer Dependencies
8
0
Distributed Files
20
20
Unpacked Size
26.97 KB
26.68 KB
Security Vulnerabilities
Security Details
Comprehensive list of direct or transitive vulnerabilities for version 1.0.2 of the package @alicloud/credentials.
All Security Vulnerabilities
All the vulnerabilities related to the version 1.0.2 of the package
Summary:
Uncontrolled Resource Consumption in json-bigint
Details:
Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.