Azure/azure-storage-node

Package "underscore" ~1.8.3 Has a Security Vulnerability

guy-microsoft opened this issue · 5 comments

guy-microsoft commented

Should be updated to 1.12.1 to resolve it.
https://snyk.io/vuln/npm:underscore

mhassan1 commented

This would be resolved by #677

  • 👍2
goelankit commented

Can someone please publish the updated azure-storage package as well.

We are dependent on the azure-storage package and are getting component governance alert for the same.

GuillermoBlanco commented

#677 Version update has been merged and it's ready to release.

Wondering if there's a programmed release cadence, or any urgency to release security patches.

  • 👍1
phawxby commented

Table Storage is feeling more and more like a dead product. The only lib that supports it hasn't been updated in 2 years :-/

  • 👍2
EmmaZhu commented

A new version 2.10.4 has been published with upgrading to underscore 1.12.1, which should be able to fix this issue.

Thanks
Emma

  • 👍1