-
Notifications
You must be signed in to change notification settings - Fork 136
Description
Version: 2.0.4
Describe the bug
Breaks build pipelines on vulnerable dependency cookie
.
# npm audit report
cookie <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x
No fix available
node_modules/cookie
@azure/static-web-apps-cli *
Depends on vulnerable versions of cookie
node_modules/@azure/static-web-apps-cli
2 low severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.
To Reproduce
Steps to reproduce the behavior:
{
"name": "build",
"version": "1.0.0",
"dependencies": {
"@azure/static-web-apps-cli": "latest"
}
}
npm audit
Expected behavior
Doesn't reference any vulnerable packages.
Additional context
Running on GitHub Actions.
giggio, semics-tech and kaylumah
Metadata
Metadata
Assignees
Labels
No labels