Snyk Code Analysis (pac-resolver) - Remote Code Execution (RCE) Vulnerability

ExpressGateway / express-gateway

A microservices API Gateway built on top of Express.js

https://www.express-gateway.io

Apache License 2.0

2.96k stars 344 forks source link

Snyk Code Analysis (pac-resolver) - Remote Code Execution (RCE) Vulnerability #1056

Open dev-script opened 1 year ago

dev-script commented 1 year ago

Issue: pac-resolver@4.2.0 Fixed In: pac-resolver@5.0.0 Introduced through: express-gateway@1.16.11 › proxy-agent@4.0.1 › pac-proxy-agent@4.1.0 › pac-resolver@4.2.0

Please upgrade internal package pac-resolver (v4.2.0 to v5.0.0) of express-gateway