Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

audit: babel & undici #5117

Merged
merged 1 commit into from
Oct 16, 2023
Merged

audit: babel & undici #5117

merged 1 commit into from
Oct 16, 2023

Conversation

skylarbarrera
Copy link
Contributor

Fixes APP-857 APP-858

What changed (plus any additional context for devs)

Screen recordings / screenshots

What to test

@linear
Copy link

linear bot commented Oct 16, 2023

APP-857 Vulnerability: GHSA-wqq4-5wpv-mx2g

Advisory title: Cookie header not cleared on cross-origin redirect in fetch

Advisory URL: GHSA-wqq4-5wpv-mx2g

APP-858 Vulnerability: GHSA-67hx-6x53-jw92

Advisory title: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

Advisory URL:GHSA-67hx-6x53-jw92

Copy link
Contributor

@dereknelson dereknelson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the auditooooooor

@skylarbarrera skylarbarrera merged commit 6f4197c into develop Oct 16, 2023
@skylarbarrera skylarbarrera deleted the @skylar/the-audit00r branch October 16, 2023 16:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants