Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Address vulnerabilities #1433

Merged
merged 3 commits into from
Mar 28, 2024

Conversation

fryjordan
Copy link
Contributor

@fryjordan fryjordan commented Mar 28, 2024

Overview

Vulnerabilities were found in Fauxton dependencies. The changes in this PR resolve them (npm audit fix).

# npm audit report

express  <4.19.2
Severity: moderate
Express.js Open Redirect in malformed URLs - https://github.com/advisories/GHSA-rv95-896h-c2vc
fix available via `npm audit fix`
node_modules/express

follow-redirects  <=1.15.5
Severity: moderate
follow-redirects' Proxy-Authorization header kept across hosts - https://github.com/advisories/GHSA-cxjh-pqwp-8mfp
fix available via `npm audit fix`
node_modules/follow-redirects

lodash.pick  >=4.0.0
Severity: high
Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw
fix available via `npm audit fix`
node_modules/lodash.pick
  nightwatch  2.6.0 - 3.3.8
  Depends on vulnerable versions of lodash.pick
  node_modules/nightwatch

4 vulnerabilities (2 moderate, 2 high)

Testing recommendations

  • Ensure CI passes.

Checklist

  • Code is written and works correctly;
  • Changes are covered by tests;
  • Documentation reflects the changes;
  • Update rebar.config.script with the correct tag once a new Fauxton release is made

@Antonio-Maranhao Antonio-Maranhao merged commit e43bb4d into apache:main Mar 28, 2024
3 checks passed
@fryjordan fryjordan deleted the address-vulnerabilities branch March 28, 2024 12:58
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants