Cx10578cb2-c0fc @ Npm-cypress-3.3.1

[RobertMickleCx]

Vulnerable Package issue exists @ Npm-cypress-3.3.1 in branch master

The Cypress package in versions prior to 10.3.0 contains a memory leak in the "CdpAutomation" class that stores Data URLs as requests in the "pendingBrowserPreRequests" array unnecessarily. The storage of the Data URLs will eventually lead to the crash of Cypress which may cause a Denial of Service.

Namespace: RobertMickleCx
Repository: NodeGoat
Repository Url: https://github.com/RobertMickleCx/NodeGoat
CxAST-Project: RobertMickleCx/NodeGoat
CxAST platform scan: 3f4864fd-127b-412c-8cca-4b4873ce2f29
Branch: master
Application: NodeGoat
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-401

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 10.3.0

---

References
Issue
Pull request
Commit
Release Note