Azure / Azure/azure-storage-node

xml2js security issue for version 0.2.8 in azure-storage

Open
#741 1 comment 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
482
Forks
227
PR merge metrics
No merged PRs in 30d

Description

> For latest features support, please switch to [Azure Storage JavaScript SDK V10](https://github.com/Azure/azure-sdk-for-js/tree/master/sdk/storage).

### Which service(blob, file, queue, table) does this issue concern?
The issue is caused by the xml2js@0.2.8 version. This needs to be updated to xml2js@0.5.0 in azure-storage@2.10.7

### Which version of the SDK was used?
azure-storage@2.10.7

### What's the Node.js/Browser version?
node 18

### What problem was encountered?
xml2js@0.2.8 introduces security vulnerabilities which can be fixed by upgrading to xml2js@0.5.0

### Steps to reproduce the issue?
Install azure-storage@2.10.7 and check dependencies for xml2js

### Have you found a mitigation/solution?
Upgrade xml2js to 0.5.0 version

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.