Snyk report - Uninitialized Memory Exposure

[impactmass]

Vulnerable module: utile

Introduced through: prompt@1.0.0
Detailed paths and remediation
Introduced through:

cordova-rave@0.0.0-development › prompt@1.0.0 › utile@0.3.0
Remediation: No remediation path available.

Overview
utile is a drop-in replacement for util with some additional advantageous functions.

Affected versions of this package are vulnerable to Uninitialized Memory Exposure. A malicious user could extract sensitive data from uninitialized memory or to cause a DoS by passing in a large number, in setups where typed user input can be passed.

Note Uninitialized Memory Exposure impacts only Node.js 6.x or lower, Denial of Service impacts any Node.js version.

[impactmass]

Fixed in latest release 1.2.2

[impactmass]

Snyk still reports this in latest release