react-bootstrap-table/react-bootstrap-table2

Dependency Underscore -1.9.1 has CRITICAL Vulnerability - Arbitrary Code Execution in underscore which has patched in >=1.12.1 versions of underscore

Opened this issue · 0 comments

Shobha-Potti commented

when I use this package react-bootstrap-table-next in create-react-app project.

when checking for vulnerabilities in the terminal

npm audit

I am encountering this error

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Critical │ Arbitrary Code Execution in underscore │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ underscore │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=1.12.1 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ react-bootstrap-table-next │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ react-bootstrap-table-next > underscore │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ GHSA-cf4h-3jhx-xvhq
├───────────────┼───────────────────────────────────────