Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(2.x): upgrade to query-string@7.x #152

Closed
wants to merge 1 commit into from
Closed

Conversation

redonkulus
Copy link
Contributor

Resolves security vulnerability in decode-uri-component@0.2.0, which the version of query-string in the routr@2.x branch of code uses.

fluxible-router@1.8.0 > routr@2.3.0 > query-string@5.1.1 > decode-uri-component@0.2.0 -- INT_VUL#CVE-2022-38900 decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS..

I confirm that this contribution is made under the terms of the license found in the root directory of this repository's source tree and that I have the authority necessary to make this contribution on behalf of its copyright owner.

@redonkulus redonkulus changed the base branch from master to 2.x November 30, 2022 17:55
@redonkulus
Copy link
Contributor Author

This won't solve the issue as query-string@7 still uses the same depenency. sindresorhus/query-string#350

@redonkulus redonkulus closed this Jan 23, 2024
@redonkulus redonkulus deleted the upgrade-qs branch January 23, 2024 18:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant