New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[🐸 Frogbot] Update version of validator to 13.7.0 #5

Open

github-actions wants to merge 1 commit into test-npm from frogbot-validator-e56d19802411f9c09f95b8ead587d665

github-actions bot commented Oct 28, 2024

📦 Vulnerable Dependencies

✍️ Summary

SEVERITY	CONTEXTUAL ANALYSIS	DIRECT DEPENDENCIES	IMPACTED DEPENDENCY	FIXED VERSIONS	CVES
High	Not Covered	validator:12.2.0	validator 12.2.0	[13.7.0]	CVE-2021-3765

🔬 Research Details

Description:
validator.js is vulnerable to Inefficient Regular Expression Complexity

🐸 JFrog Frogbot


          Upgrade validator to 13.7.0

7ddf400

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet