midwayjs/pandora

Releases214

Frequency6 days 1 hour

Last Releaseabout 5 years ago

Stars3.06K

A Manageable, Measurable and Traceable Node.js Application Manager represented by Alibaba powered by TypeScript

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2018-13144NVD↗	all versions	Jul 4, 2018Wednesday, 4 July 2018, 15:29	7.5 HIGH	5 MEDIUM
The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party.
CVE-2017-3194NVD↗	< 8.3.2	Dec 16, 2017Saturday, 16 December 2017, 02:29	—	4.3 MEDIUM
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.