aquasecurity / aquasecurity/cloudsploit
Deprecated azure-storage module.
Open
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
Cloudsploit is using an deprated module "azure-storage" that is vulnerable to RCE because of Underscore dependency.
The new module to replace the depracted one is https://www.npmjs.com/package/@azure/storage-blob
Contributor guide
Research direction
Locate the project's uses of the deprecated azure-storage module and review the linked @azure/storage-blob package as the replacement. Verify that the replacement removes the vulnerable dependency and that the existing test suite or relevant Azure integration checks still pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, javascript
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100