conductor-oss / conductor-oss/javascript-sdk

[GHSA-2g4f-4pwh-qvx6] ajv@6.12.6: ReDoS when using $data option

Open
#114 1 comment 0 reactions 0 assignees View on GitHub
security vulnerability
Dominant language
TypeScript
Stars
58
Forks
20
Avg merge
1d 13h
Merged PRs (30d)
7

Description

## Vulnerability Report

| CVE | Library | Installed | Fixed |
|-----|---------|-----------|-------|
| GHSA-2g4f-4pwh-qvx6 | ajv | 6.12.6 | 6.14.0 |

### Summary
ajv has ReDoS when using $data option.

### References
- [GHSA-2g4f-4pwh-qvx6](https://osv.dev/vulnerability/GHSA-2g4f-4pwh-qvx6)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.