Snyk Code Analysis - Remote Code Execution (RCE) Vulnerability

ExpressGateway / express-gateway

A microservices API Gateway built on top of Express.js

https://www.express-gateway.io

Apache License 2.0

2.96k stars 344 forks source link

Open dev-script opened 1 year ago

dev-script commented 1 year ago

Issue: ejs@2.7.4 Fixed In: ejs@3.1.7

Introduced through:

express-gateway@1.16.11 › ejs@2.7.4
express-gateway@1.16.11 › yeoman-environment@2.10.3 › mem-fs-editor@6.0.0 › ejs@2.7.4
express-gateway@1.16.11 › yeoman-generator@3.2.0 › mem-fs-editor@5.1.0 › ejs@2.7.4

Please upgrade internal package ejs (v2.7.4 to v3.1.7) of express-gateway