Code Inspection: npm audit on yaml-start - Githubissues

atomist / cli

The Atomist CLI

Apache License 2.0

20 stars 4 forks source link

Code Inspection: npm audit on yaml-start #122

Closed atomist[bot] closed 4 years ago

atomist[bot] commented 4 years ago

handlebars:<4.3.0

(error) Prototype Pollution Upgrade to version 4.3.0 or later.
- handlebars:4.1.2:
- @atomist/sdm-local>express-handlebars>handlebars

handlebars:<4.5.2

(error) Arbitrary Code Execution Upgrade to version 4.5.2 or later.
- handlebars:4.1.2:
- @atomist/sdm-local>express-handlebars>handlebars

handlebars:<4.5.3

(error) Arbitrary Code Execution Upgrade to version 4.5.3 or later.
- handlebars:4.1.2:
- @atomist/sdm-local>express-handlebars>handlebars
(error) Prototype Pollution Upgrade to version 4.5.3 or later.
- handlebars:4.1.2:
- @atomist/sdm-local>express-handlebars>handlebars

handlebars:>=4.0.0 <4.4.5

(warn) Denial of Service Upgrade to version 4.4.5 or later.
- handlebars:4.1.2:
- @atomist/sdm-local>express-handlebars>handlebars

[atomist:code-inspection:yaml-start=@atomist/atomist-sdm]

atomist[bot] commented 4 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed 7d6ce2b.