Submission Details
Severity:
Insecure Dependency Usage
Summary
The repository uses outdated libraries that have known vulnerabilities.
Vulnerability Details
Affected Code Sections: package.json (lines 12-15)
Details: Outdated libraries (express 4.17.1, lodash 4.17.21) have known vulnerabilities (CVE-2022-11534, CVE-2021-23337)
Code Snippet:
"dependencies": {
"express": "^4.17.1",
"lodash": "^4.17.21"
}
Impact
Potential Impact: Remote code execution or denial of service.
Tools Used
RecommendationsUpdate dependencies to the latest stable versions.
Regularly monitor updates using tools like Snyk.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
69929 USDC / LOC
19,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.