search

node-red / node-red-node-test-helper

A test framework for Node-RED nodes
Apache License 2.0
57 stars 41 forks source link

node-red-node-test-helper #77

Closed kasasusmitha12 closed 5 months ago

kasasusmitha12 commented 5 months ago

We need to upgrade this version "4.19.2 or later." . We have found a vulnerability in the "express" package. Please consider upgrading and releasing new release notes for the package. Here I am providing CVE and Vendor Advisories CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-29041

Venodr Advisories: https://github.com/expressjs/express/security/advisories/GHSA-rv95-896h-c2vc https://github.com/expressjs/express/releases/tag/4.19.2

knolleary commented 5 months ago

Have published 0.3.4 with the updated dependencies.