search

mtennoe / swagger-typescript-codegen

A Swagger Codegenerator tailored for typescript.
Apache License 2.0
140 stars 52 forks source link

CVE-2021-33502 in normalize-url #128

Closed greyscaled closed 3 years ago

greyscaled commented 3 years ago

CVE-2021-33502 exists in normalize 4.5.0:

https://github.com/mtennoe/swagger-typescript-codegen/blob/2805e472a77f0409355bf7142fc7adf7803daf36/package-lock.json#L7081-L7085

Patch exists in 6.0.1, 5.3.1, 4.5.1.

Dependency path:

The 4.5.1 patch is compatible

https://github.com/mtennoe/swagger-typescript-codegen/blob/2805e472a77f0409355bf7142fc7adf7803daf36/package-lock.json#L1213

This should be a straight forward fix