Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

high severity vulnerabilities from normalize-url library (ReDoS issue) #392

Closed
tomhsiao1260 opened this issue Jun 9, 2021 · 1 comment 路 Fixed by #395
Closed

high severity vulnerabilities from normalize-url library (ReDoS issue) #392

tomhsiao1260 opened this issue Jun 9, 2021 · 1 comment 路 Fixed by #395

Comments

@tomhsiao1260
Copy link

tomhsiao1260 commented Jun 9, 2021 •
edited

馃憠 Current behaviour

Yesterday, normalize-url was found to have high security vulnerabilities from npm security advisories.
https://www.npmjs.com/advisories/1755

馃憠 Reproduction Example

run npm install gh-pages
refi93 added a commit to vacuumlabs/ledgerjs-cardano-shelley that referenced this issue Jun 9, 2021
@refi93
Force version 4.5.1 of normalize-url
c9dd06c 
context: tschaub/gh-pages#392
This was referenced Jun 9, 2021
Merged
Closed
@tomhsiao1260
Copy link
Author

The PR for this issue #393

@tw0517tw tw0517tw mentioned this issue Jun 18, 2021
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Switch from filenamify-url to filenamify tw0517tw/gh-pages
1 participant
@tomhsiao1260