crypto-js version vulnerability - Githubissues

kinde-oss / kinde-react-native-sdk-0-7x

Kinde React Native SDK for authentication for 0.7x

MIT License

21 stars 9 forks source link

crypto-js version vulnerability #37

Open tyrong opened 4 months ago

tyrong commented 4 months ago

Prerequisites

[X] I have searched the repository’s issues and Kinde community to ensure my issue isn’t a duplicate
[X] I have checked the latest version of the library to replicate my issue
[X] I have read the contributing guidelines
[X] I agree to the terms within the code of conduct

Describe the issue

The current version of crypto-js has a critical vulnerability. https://github.com/advisories/GHSA-xwcq-pm8m-c4vf.

This is solved in version 4.2

Library URL

https://github.com/kinde-oss/kinde-react-native-sdk-0-7x

Library version

1.3.0

Operating system(s)

macOS

Operating system version(s)

Sonoma 14.5

Further environment details

No response

Reproducible test case URL

No response

Additional information

No response

simonszalai commented 3 months ago

+1

donutcube commented 3 months ago

+1