Detections
Analytics

SCA: security update for papaparse (GHSA-qvjc-g5vr-mfgr)

high Tenable Cloud Security Plugin ID 418337

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected
 is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression
 complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is
 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade the affected component. The
 identifier of this vulnerability is VDB-218004. (CVE-2020-36649)

See Also

https://github.com/advisories/GHSA-qvjc-g5vr-mfgr

Plugin Details

Severity: High

ID: 418337

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.51

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2020-36649

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/4/2020

Vulnerability Publication Date: 9/4/2020

Reference Information

CVE: CVE-2020-36649

cwe: CWE-185