You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Breaks build pipelines on vulnerable dependency cookie.
# npm audit report
cookie <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x
No fix available
node_modules/cookie
@azure/static-web-apps-cli *
Depends on vulnerable versions of cookie
node_modules/@azure/static-web-apps-cli
2 low severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.
Version: 2.0.4
Describe the bug
Breaks build pipelines on vulnerable dependency
cookie
.To Reproduce
Steps to reproduce the behavior:
npm audit
Expected behavior
Doesn't reference any vulnerable packages.
Additional context
Running on GitHub Actions.
The text was updated successfully, but these errors were encountered: