New release with uuid update to fix security alert (GHSA-w5hq-g745-h8pq uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided)

Open
#234 1 comment 5 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
45/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Quiet
Tech stack
typescript
Domain
devtools, release, security

Research direction

Start by reading the GHSA advisory and reviewing the referenced pull request #231 to confirm the uuid fix and its scope. Then inspect the repository's dependency and release process; done means a new release containing the fix is published and the security alert is mitigated.

Written by the indexing model from the issue text.

Description

Hi there

we got a security vulnerability alert for https://github.com/advisories/GHSA-w5hq-g745-h8pq
Is it possible to get a new release to mitigate this? It seems to be fixed with https://github.com/react-hook-form/devtools/pull/231

Thank you

Dominant language
TypeScript
Stars
670
Forks
55
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from react-hook-form/devtools

All issues in react-hook-form/devtools

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.