-
Notifications
You must be signed in to change notification settings - Fork 57
Open
Description
As our pen tests have shown, this NuGet package uses frontend libraries containing vulnerabilities:
-
axios 0.19.0
1.1. Regular Expression Denial of Service (ReDoS)
https://security.snyk.io/vuln/SNYK-JS-AXIOS-1579269
1.2. Server-Side Request Forgery (SSRF)
https://security.snyk.io/vuln/SNYK-JS-AXIOS-1038255 -
vue 2.6.10
2.1. Vulnerability on vue-server-renderer
Vulnerability on vue-server-renderer vuejs/vue#10930
https://github.com/vuejs/vue/releases/tag/v2.6.11
The vulnerabilities might be affecting features of the libraries that the dashboard is not using, but it would be good to keep it up to date and use the latest versions.
Metadata
Metadata
Assignees
Labels
No labels