Skip to content

bump express version to address CVE-2024-29041 #122

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Mar 29, 2024

Conversation

LiranCohen
Copy link
Member

@LiranCohen LiranCohen commented Mar 29, 2024

This PR is primarily to address a high severity vulnerability:

  • CVE-2024-29041 - Express.js Open Redirect in malformed URLs

  • bump package version to 0.1.16

Copy link
Collaborator

@thehenrytsai thehenrytsai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@codecov-commenter
Copy link

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 94.43%. Comparing base (2663f9c) to head (293b9b4).

❗ Current head 293b9b4 differs from pull request most recent head 38e4d6f. Consider uploading reports for the commit 38e4d6f to get more accurate results

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #122   +/-   ##
=======================================
  Coverage   94.43%   94.43%           
=======================================
  Files          25       25           
  Lines        2247     2247           
  Branches      299      299           
=======================================
  Hits         2122     2122           
  Misses        124      124           
  Partials        1        1           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@LiranCohen LiranCohen merged commit 3873d9f into main Mar 29, 2024
@LiranCohen LiranCohen deleted the lirancohen/bump-express-version branch March 29, 2024 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants