New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Alert: Dependabot issue (6) - high #286

Open

Bhavdeep13 opened this issue Jul 25, 2024 · 0 comments · May be fixed by #295

Assignees

Labels

security

Milestone

Security Issues

Collaborator

Bhavdeep13 commented Jul 25, 2024

A security vulnerability has been detected in the GHSA-q3qx-c6g2-7pw2 package.

Severity: high
Summary: aiohttp's ClientSession is vulnerable to CRLF injection via version
Details: (https://github.com/N5GEH/n5geh.tools.mqtt-gateway/security/dependabot/6)

Please review and address this issue accordingly.

Bhavdeep13 added the security label

Bhavdeep13 added this to the Security Issues milestone

Bhavdeep13 self-assigned this

Bhavdeep13 linked a pull request

that will close this issue

chore(deps): bump aiohttp from 3.8.4 to 3.10.2 in /backend/api #295

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment