search

exasol / exasol-driver-ts

Exasol Typescript / Javascript Driver for Node and the Browser
MIT License
0 stars 1 forks source link

Fix vulnerabilities #26

Closed pj-spoelders closed 9 months ago

pj-spoelders commented 9 months ago

Fixes CVE-2023-45133, reported by dependabot Bumps jsrsasign and babel

pj-spoelders commented 9 months ago

Apparently RSA is no longer supported in the newest versions of jsrsasign (above 11.x.x) required to fix this vulnerability https://kjur.github.io/jsrsasign/api/symbols/KJUR.crypto.Cipher.html (see the note) more on the vulnerability https://github.com/kjur/jsrsasign/issues/598 https://nvd.nist.gov/vuln/detail/CVE-2024-21484

pj-spoelders commented 9 months ago

Swapped out jsrsasign