RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
https://retirejs.github.io/retire.js/
Other
3.66k stars 414 forks source link

Please incorporate new security vulnerability for CKEditor up to 4.15.1 #344

Closed pcoder47 closed 3 years ago

pcoder47 commented 3 years ago

Retire.js version: (retire --version): latest

node version: (node --version):

Type: Bug

Description: Using retire.js scanning the latest CKEditor vulnerability for versions < 4.15.1 is not recognized as it's not in the retireJS issue repository as far as I can see.

https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-4151

Expected behaviour: retireJS scanning on a project should detect the latest CKEditor security vulnerability for versions lower than 4.15.1

eoftedal commented 3 years ago

Thanks!