Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Critical security finding in jest-reporters #15140

Open
majklfly opened this issue Jun 20, 2024 · 0 comments
Open

[Bug]: Critical security finding in jest-reporters #15140

majklfly opened this issue Jun 20, 2024 · 0 comments

Comments

@majklfly
Copy link

majklfly commented Jun 20, 2024

Version

latest

Steps to reproduce

install

Expected behavior

removed critical security finding

Actual behavior

present critical security finding

Additional context

For some reason I struggled to create directly a security issue, so please:

Updade package istanbul-lib-instrument 6.0.0 --> 6.0.2 in jest-reporters. (and all other packages, that are using this package). It appears, that version 6.0.2 is already using babel >7.23.2 which does not contain critical finding.

https://github.com/adviso2023-45133ries/GHSA-67hx-6x53-jw92
https://nvd.nist.gov/vuln/detail/CVE-2023-45133

Environment

Ubuntu --> but not related to this problem.
@majklfly majklfly changed the title [Bug]: [Bug]: Critical security finding in jest-reporters Jun 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant