koajs / joi-router

Configurable, input and output validated routing for koa
MIT License
450 stars 96 forks source link

XSS vulnerability detected in `clone` package #95

Closed piyushchauhan2011 closed 4 years ago

piyushchauhan2011 commented 5 years ago

I found that clone package recently got detected with XSS vulnerability detected.

It would be nice to have it replaced, please check it on npm here: https://www.npmjs.com/package/clone

Screenshot 2019-08-28 at 17 36 48
aheckmann commented 4 years ago

only xss issue i see was closes a long time ago in a previous release https://github.com/pvorb/clone#2017-11-08 What are you seeing?

piyushchauhan2011 commented 4 years ago

I think this issue can be closed as now xss vulnerability is not visible on npm, was only worried about it @aheckmann

milofultz commented 2 years ago

I'm seeing it on the page as of 20220321:

Screen Shot 2022-03-21 at 10 10 26 AM