-
> [!NOTE]
> The vulnerability described here has been tested with lerna version `8.1.4`, however as described below it is an issue for `8.1.8` also due to the dependency with `nx`.
## Current Beha…
-
## Description
The types returned from `AxiosDataFetcher::fetch()` from `@sitecore-jss/sitecore-jss-nextjs` is incompatible with the actual type declared in `axios`. This happens after updating Axios…
thany updated
3 weeks ago
-
You are using aws/aws-sdk-php version 3.0 but that version has some security problems https://security.snyk.io/vuln/SNYK-PHP-AWSAWSSDKPHP-6137984
Can you try upgrade aws/aws-sdk-php to version 3.28…
-
the package @okta/jwt-verifier@3.0.0 is having njwt@2.0.0 as a dependency\
https://www.npmjs.com/package/@okta/jwt-verifier?activeTab=dependencies
snyk has reported an issue with njwt@2.0.0
…
-
The dependency was last updated 2016 and officially deprecated 2018. Especially as it's a networking library this is unacceptable from a security perspective. It also causes compatibility issues with …
-
Running log of build failure for snyk.io=1.1293.0
-
The service will finish by the end of 2017: https://blog.versioneye.com/2017/10/19/versioneye-sunset-process/
-
**Issue Description:**
A potential Server-Side Request Forgery (SSRF) vulnerability was detected in the `miniget` library. The issue was identified in the file `index.js` at line 170, where unsanitiz…
-
Hello, there is a vulnerability detected by Snyk that is affecting other packages using this one (like [decompress](https://www.npmjs.com/package/decompress) ).
https://security.snyk.io/package/npm/d…
-
This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (`async=False` on `xhr.open`), malicious user input flowing i…