Skip to content

Update vulnerable libraries (axios 0.19, vue 2.6.10) #104

@potaczeklukasz

Description

@potaczeklukasz

As our pen tests have shown, this NuGet package uses frontend libraries containing vulnerabilities:

  1. axios 0.19.0
    1.1. Regular Expression Denial of Service (ReDoS)
    https://security.snyk.io/vuln/SNYK-JS-AXIOS-1579269
    1.2. Server-Side Request Forgery (SSRF)
    https://security.snyk.io/vuln/SNYK-JS-AXIOS-1038255

  2. vue 2.6.10
    2.1. Vulnerability on vue-server-renderer
    Vulnerability on vue-server-renderer vuejs/vue#10930
    https://github.com/vuejs/vue/releases/tag/v2.6.11

The vulnerabilities might be affecting features of the libraries that the dashboard is not using, but it would be good to keep it up to date and use the latest versions.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions