[DepShield] (CVSS 4.3) Vulnerability due to usage of semantic-release:17.2.1

sonatype-nexus-community / nexus-iq-chrome-extension

Chrome extension for use with Sonatype Nexus Lifecycle - IQ server

https://sonatype-nexus-community.github.io/nexus-iq-chrome-extension/

Apache License 2.0

20 stars 12 forks source link

[DepShield] (CVSS 4.3) Vulnerability due to usage of semantic-release:17.2.1 #185

Closed sonatype-depshield[bot] closed 2 years ago

sonatype-depshield[bot] commented 2 years ago

Vulnerabilities

DepShield reports that this application's usage of semantic-release:17.2.1 results in the following vulnerability(s):

(CVSS 4.3) CWE-200: Information Exposure

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

ctownshend commented 2 years ago

dev dependency