jpsla94 comments

Results 8 comments of


                                            jpsla94

Braces is marked as DoS vulnerable via Memory Exhaustion by Blackduck

> 3.0.3 is coming this weekend. @paulmillr Was 3.0.3 released?

What's the deal with 4.0.7?

Hello, Any update?

What's the deal with 4.0.7?

Update?

[CVE-2024-4067] Vulnerability detected in micromatch.braces()

Thank you @jacobjmarks. Could kindly update this thread when the issue is fixed?

[CVE-2024-4067] Vulnerability detected in micromatch.braces()

@JeanMeche Which lock file are you talking about?

[CVE-2024-4067] Vulnerability detected in micromatch.braces()

Hello, I have the latest version of micromatch 4.0.7 and braces 3.0.3. I updated through override of the dependencies. But the vulnerability still appears on the security report. Any more...

[CVE-2024-4067] Vulnerability detected in micromatch.braces()

I downgraded to 4.0.6. in the meantime. Will close this topic now.

Migration guide and release notes for 3.0 is missing

@ptupitsyn - Its been a couple of months since you said the migration guide coming soon. Are new updates on this?