-
Notifications
You must be signed in to change notification settings - Fork 55
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add daily trial #373
base: master
Are you sure you want to change the base?
Add daily trial #373
Conversation
Semgrep found 1
Risk: Affected version of handlebars is vulnerable to Improper Neutralization Of Special Elements In Output Used By A Downstream Component ('Injection') / Improperly Controlled Modification Of Object Prototype Attributes ('Prototype Pollution'). The vulnerability allows for Prototype Pollution, potentially leading to Remote Code Execution, as templates can modify an object's Fix: Upgrade this library to at least version 4.3.0 at auth0-authorization-extension/package-lock.json:17973. Reference(s): GHSA-w457-6q6x-cgp9, CVE-2019-19919 Ignore this finding from ssc-45c7ee79-f517-41e2-b61a-45743d9df9c6. |
PR to update dependencies to use node18 runtime