ThePacielloGroup / CCAe

The Colour Contrast Analyser (CCA) helps you determine the legibility of text and the contrast of visual elements, such as graphical controls and visual indicators.
http://www.paciellogroup.com/resources/contrastanalyser/
GNU General Public License v3.0
468 stars 105 forks source link

Update electron library to 26.2.4 to mitigate High vulnerability CVE-2023-5217 #322

Closed KenMillard-Steampunk closed 4 months ago

KenMillard-Steampunk commented 7 months ago

Describe the bug Based on Trivy scan of project's SBOM, the current version of the electron library used for this project is outdated (26.2.2) and must be updated to at least 26.2.4 to mitigate a high vulnerability.

Desktop (please complete the following information):

To Reproduce Steps to reproduce the behavior:

  1. In GitHub, go to Insights > Dependencies > Export SBOM.

  2. Then, install Trivy (https://aquasecurity.github.io/trivy/v0.33/docs/sbom/spdx/) and run this command: trivy sbom {name of sbom}.json

Screenshots If applicable, add screenshots to help explain your problem.

image