Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Security Vulnerability Issue

See original GitHub issue

🐛 Bug Report

Im using Jest package that dependent on jest-reporters. jest-reporters dependent on node-notifier version 8.0.0. when I scan my app (with Veracode sca) I getting Command Injection Vulnerability from node-notifier version 8.0.0, They suggest updating node-notifier version to 9.0.0, so that it is not vulnerable version, but I can not do it in my code because the dependencies are inside your code so I’ll be happy if you can update your node-notifier version to 9.0.0 version (inside jest-reporters package.json dependency).

To Reproduce

Steps to reproduce the behavior: yarn add node-notifier@9.0.0

Expected behavior

fix Security Vulnerability issue

Link to repl or repo (highly encouraged)

screen shout from Veracode sca security scan: you can see that they recommend to update node-notifier version to fix this issue Image 15-12-2020 at 15 06

envinfo

Issue Analytics

State:
Created 3 years ago
Reactions:4
Comments:12 (3 by maintainers)

Top GitHub Comments

2reactions

mikaelbrcommented, Dec 15, 2020

Sorry about that! I just hadn’t gotten around to it/prioritized it. I’ve published node-notifier@8.0.1 now. Hope this helps. If not, let me know.

1reaction

mikaelbrcommented, Dec 17, 2020

This should be fixed by patch 8.0.1 also.

Top Results From Across the Web

10 Common Web Security Vulnerabilities - Toptal

Don't suffer through a security breach—take action before any problems arise. Master these 10 common web security vulnerabilities now.

Vulnerabilities, Exploits, and Threats at a Glance - Rapid7

A Security Vulnerability is a weakness, flaw, or error found within a security system that has the potential to be leveraged by a...

Vulnerability (computing) - Wikipedia

Vulnerabilities are flaws in a computer system that weaken the overall security of the device/system. Vulnerabilities can be weaknesses in either the ...

Known Exploited Vulnerabilities Catalog | CISA

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow ......

Latest cybersecurity vulnerability news | The Daily Swig

Keeping up with security vulnerabilities is now more crucial than ever. ... Mastodon vulnerable to multiple system config problems.