-
Notifications
You must be signed in to change notification settings - Fork 387
Closed
Labels
api: storageIssues related to the googleapis/nodejs-storage API.Issues related to the googleapis/nodejs-storage API.priority: p2Moderately-important priority. Fix may not be included in next release.Moderately-important priority. Fix may not be included in next release.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
Description
Environment details
@google-cloud/storageversion: 7.12.0
@google-cloud/storage has a dependency on the fast-xml-parser package, and a ReDoS vulnerability was reported on that package a few days ago. I see you're using v4.3.2 which contains the vulnerability, but there was a safe version (4.4.1) released to fix the vulnerability. Could you upgrade the package to >= 4.4.1 use a safe version of fast-xml-parser?
mleprince
Metadata
Metadata
Assignees
Labels
api: storageIssues related to the googleapis/nodejs-storage API.Issues related to the googleapis/nodejs-storage API.priority: p2Moderately-important priority. Fix may not be included in next release.Moderately-important priority. Fix may not be included in next release.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.