Azure / Azure/azure-storage-node
xml2js security issue for version 0.2.8 in azure-storage
- Dominant language
- JavaScript
- Stars
- 482
- Forks
- 227
- PR merge metrics
- No merged PRs in 30d
Description
> For latest features support, please switch to [Azure Storage JavaScript SDK V10](https://github.com/Azure/azure-sdk-for-js/tree/master/sdk/storage).
### Which service(blob, file, queue, table) does this issue concern?
The issue is caused by the xml2js@0.2.8 version. This needs to be updated to xml2js@0.5.0 in azure-storage@2.10.7
### Which version of the SDK was used?
azure-storage@2.10.7
### What's the Node.js/Browser version?
node 18
### What problem was encountered?
xml2js@0.2.8 introduces security vulnerabilities which can be fixed by upgrading to xml2js@0.5.0
### Steps to reproduce the issue?
Install azure-storage@2.10.7 and check dependencies for xml2js
### Have you found a mitigation/solution?
Upgrade xml2js to 0.5.0 version
Contributor guide
Assessment
This issue has not been assessed yet.