New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security vulnerability(Denial of Service) in all released versions #37

Closed

mivanovaxway opened this issue Feb 16, 2021 · 1 comment

mivanovaxway commented Feb 16, 2021

Certain security scanners are marking this library as vulnerable.

Please see(sample code is included):
https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905

There is also a CVE here:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28469

phated closed this as completed

gulpjs locked as spam and limited conversation to collaborators

Member

phated commented Feb 16, 2021

Don't spam our repo.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.