Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update consolidate dependency #94

Open
brenoatgetmomo opened this issue Sep 9, 2024 · 0 comments
Open

Update consolidate dependency #94

brenoatgetmomo opened this issue Sep 9, 2024 · 0 comments

Comments

@brenoatgetmomo
Copy link

We should update consolidate dependency to its last version.

There is a vulnerability in underscore used in consolidate.

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant