Merge pull request #231 from pascaliske/dependabot/npm_and_yarn/webpa… · pascaliske/docker-traefik-errors@6eb5eaa

Triggered via push March 22, 2024 10:12

pascaliske

master

Status Success

Total duration 3m 44s

Artifacts –

image.yml

on: push

3 errors and 3 warnings

CVE-2023-52425 - HIGH severity - expat: parsing large tokens can trigger a denial of service vulnerability in libexpat

CVE-2024-28757 - HIGH severity - expat: XML Entity Expansion vulnerability in libexpat

CVE-2024-25062 - HIGH severity - libxml2: use-after-free in XMLReader vulnerability in libxml2

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

CVE-2023-52426 - MEDIUM severity - expat: recursive XML entity expansion vulnerability vulnerability in libexpat

The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/