-
Currently the package is dependent on `NETStandard.Library@1.6.1` which by it's own dependencies generates security warnings (6 in total). Updating it to the current latest version v2.0.3 solves the s…
-
https://snyk.io/test/github/bag-man/nodestack
-
The `efk` addon contains the image `k8s.gcr.io/elasticsearch:v5.6.2@sha256:7e95b32a7a2aad0c0db5c881e4a1ce8b7e53236144ae9d9cfb5fbe5608af4ab2`
This image contains Log4j CVEs
```
✗ Remote Code Exe…
-
Version 2.0.0 of ImageSharp is affected by this vulnerability:
https://github.com/advisories/GHSA-65x7-c272-7g7r
-
- `node -v`: v18.19.0
- `npm -v`: 10.2.3
- OS: (e.g. OSX, Linux, Windows, ...)
- Command run: (e.g. `snyk-api-import ...`, ...)
### Expected behaviour
Please share _expected_ behaviour.
The …
-
## CKAN version
2.10.4
## Describe the bug
snyk scan reports Remote Code Execution (RCE) HIGH vulnerability for WERKZEUG version below `3.0.3`.
https://security.snyk.io/vuln/SNYK-PYTHON-WERKZEUG…
-
Snyk reports a security vulnerability for this package because of the dependency on the lodash.template standalone package.
You can see the report here: https://security.snyk.io/vuln/SNYK-JS-LODASHTE…
-
### Describe the bug
Improper Input Validation (new) [High Severity][https://security.snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137] in follow-redirects@1.15.0
PR for fix is - https://github.com/…
-
see: https://security.snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-174708
Tested 83 dependencies for known issues, found 1 issue, 3 vulnerable paths.
Log:
Issues with no direct upgrade…
-