synopsys-sig / synopsys-action

Synopsys Action consuming Synopsys scanning tools
Apache License 2.0
24 stars 18 forks source link

Blackduck: Automated PR: Update underscore/1.8.3 to 1.13.7 #270

Open github-actions[bot] opened 3 days ago

github-actions[bot] commented 3 days ago

Vulnerabilities associated with underscore/1.8.3

BDSA-2021-1143 (HIGH): The Underscore Javascript library contains an arbitrary code execution vulnerability. This allows an attacker to create malicious content that, if processed by Underscore may lead to the execution of code on a system.

Click Here To See More Details On Server