This repository has been archived by the owner on Apr 11, 2023. It is now read-only.

Trustbloc: Upgrade loader-utils (npm) to fix ReDOS vulnerability #459

Open

biljanaLukovic opened this issue Nov 24, 2022 · 0 comments

biljanaLukovic commented Nov 24, 2022

HIGH Severity Regular Expression Denial of Service (ReDoS) vulnerability was identified by github in : loader-utils

Package: loader-utils ( npm )
Affected versions Patched versions

= 1.0.0, < 1.4.2 1.4.2
= 2.0.0, < 2.0.4 2.0.4
= 3.0.0, < 3.2.1 3.2.1

Vulnerable modules:
trustbloc/sandbox
• cmd/login-consent-server-vue/package-lock.json

trustbloc/adapter

• cmd/issuer-adapter-vue/package-lock.json
• cmd/rp-adapter-vue/package-lock.json
• cmd/wallet-adapter-web/package-lock.json

The text was updated successfully, but these errors were encountered:

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.