Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update npm module debug (moderate severity vulnerability) #6518

Merged
merged 1 commit into from
Oct 3, 2023
Merged

update npm module debug (moderate severity vulnerability) #6518

merged 1 commit into from
Oct 3, 2023

Conversation

thurka
Copy link
Contributor

@thurka thurka commented Oct 3, 2023

moderate severity vulnerability fixed by upgrading debug module.

# npm audit report

debug  3.2.0 - 3.2.6
Severity: moderate
Regular Expression Denial of Service in debug - https://github.com/advisories/GHSA-gxpj-cx7g-858c
fix available via `npm audit fix`
node_modules/https-proxy-agent/node_modules/debug

1 moderate severity vulnerability

@thurka thurka requested a review from dbalek October 3, 2023 08:50
@thurka thurka self-assigned this Oct 3, 2023
@thurka thurka added VSCode Extension [ci] enable VSCode Extension tests LSP [ci] enable Language Server Protocol tests labels Oct 3, 2023
@apache apache locked and limited conversation to collaborators Oct 3, 2023
@apache apache unlocked this conversation Oct 3, 2023
@dbalek dbalek requested a review from MartinBalin October 3, 2023 10:05
dbalek
dbalek approved these changes Oct 3, 2023
View reviewed changes
Copy link
Contributor

@dbalek dbalek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks.

@thurka thurka merged commit 7747055 into apache:master Oct 3, 2023
@thurka thurka deleted the npm_debug branch October 16, 2023 08:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dbalek dbalek dbalek approved these changes

@MartinBalin MartinBalin MartinBalin approved these changes

Assignees

@thurka thurka

Labels
LSP [ci] enable Language Server Protocol tests VSCode Extension [ci] enable VSCode Extension tests
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@thurka @dbalek @MartinBalin