We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
This issue provides visibility into Lalaps updates and their statuses.
decode-uri-component vulnerable to Denial of Service (DoS) Library: decode-uri-component Affected versions: <=0.2.0 Severity: low Root Libraries:
decode-uri-component
<=0.2.0
danger
minimatch ReDoS vulnerability Library: minimatch Affected versions: <3.0.5 Severity: high Root Libraries:
minimatch
<3.0.5
mocha
Authorization Bypass in parse-path Library: parse-path Affected versions: <5.0.0 Severity: high Root Libraries:
parse-path
<5.0.0
Cross site scripting in parse-url Library: parse-url Affected versions: <6.0.1 Severity: moderate Root Libraries:
parse-url
<6.0.1
Last Updated: 01 Dec 2022, at 01:08 UTC
The text was updated successfully, but these errors were encountered:
No branches or pull requests
This issue provides visibility into Lalaps updates and their statuses.
npm
decode-uri-component vulnerable to Denial of Service (DoS)
Library:
decode-uri-componentAffected versions:
<=0.2.0Severity: low
Root Libraries:
dangerminimatch ReDoS vulnerability
Library:
minimatchAffected versions:
<3.0.5Severity: high
Root Libraries:
mochaAuthorization Bypass in parse-path
Library:
parse-pathAffected versions:
<5.0.0Severity: high
Root Libraries:
Cross site scripting in parse-url
Library:
parse-urlAffected versions:
<6.0.1Severity: moderate
Root Libraries:
Last Updated: 01 Dec 2022, at 01:08 UTC
The text was updated successfully, but these errors were encountered: