search

ncs-northware / northware

Manage the NCS Bussiness
https://ncs-northware.github.io/northware/
0 stars 0 forks source link

[Security]: cookie accepts cookie name, path, and domain with out of bounds characters #154

Open onissen opened 1 week ago

onissen commented 1 week ago

Link zum Dependbot Alert

https://github.com/ncs-northware/northware/security/dependabot/4

Schweregrad

Low

Betroffenes Package

@eslint-community/eslint-utils

northware@ 
└─┬ @eslint-community/eslint-utils@4.4.0 extraneous -> .\node_modules\.pnpm\@eslint-community+eslint-utils@4.4.0_eslint@9.14.0_jiti@1.21.6_\node_modules\@eslint-community\eslint-utils
  └─┬ eslint@9.14.0 invalid: "^8.28.0" from node_modules/.pnpm/@eslint-community+eslint-utils@4.4.0_eslint@9.14.0_jiti@1.21.6_/node_modules/@eslint-community/eslint-utils -> .\node_modules\.pnpm\eslint@9.14.0_jiti@1.21.6\node_modules\eslint
    ├─┬ got@12.6.1 invalid: "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/eslint@9.14.0_jiti@1.21.6/node_modules/eslint -> .\node_modules\.pnpm\got@12.6.1\node_modules\got
    │ └─┬ express@4.21.0 -> .\node_modules\.pnpm\express@4.21.0\node_modules\express
    │   └── cookie@0.6.0 -> .\node_modules\.pnpm\cookie@0.6.0\node_modules\cookie
    └─┬ webpack@5.95.0 invalid: "^1.15.0" from node_modules/.pnpm/source-map-support@0.5.21/node_modules/source-map-support, "^4.31.0" from node_modules/.pnpm/rxjs@7.8.1/node_modules/rxjs, "~1.14.0" from node_modules/.pnpm/esprima@4.0.1/node_modules/esprima -> .\node_modules\.pnpm\webpack@5.95.0\node_modules\webpack
      └─┬ mini-css-extract-plugin@2.9.1 -> .\node_modules\.pnpm\mini-css-extract-plugin@2.9.1_webpack@5.95.0\node_modules\mini-css-extract-plugin
        └─┬ webpack-dev-server@4.15.2 -> .\node_modules\.pnpm\webpack-dev-server@4.15.2_webpack@5.95.0\node_modules\webpack-dev-server
          └─┬ express@4.21.0 -> .\node_modules\.pnpm\express@4.21.0\node_modules\express
            └── cookie@0.6.0 deduped -> .\node_modules\.pnpm\cookie@0.6.0\node_modules\cookie

Beschreibung

Das Package wird von einer ESLint dependency verwendet. Vielleicht löst sich das Problem, wenn klar ist, wie wir mit @northware/eslint-config umgehen sollen