[Security]: cookie accepts cookie name, path, and domain with out of bounds characters

[onissen]

Link zum Dependbot Alert

https://github.com/ncs-northware/northware/security/dependabot/4

Schweregrad

Low

Betroffenes Package

@eslint-community/eslint-utils

northware@ 
└─┬ @eslint-community/[email protected] extraneous -> .\node_modules\.pnpm\@[email protected][email protected][email protected]_\node_modules\@eslint-community\eslint-utils
  └─┬ [email protected] invalid: "^8.28.0" from node_modules/.pnpm/@[email protected][email protected][email protected]_/node_modules/@eslint-community/eslint-utils -> .\node_modules\.pnpm\e[email protected][email protected]\node_modules\eslint
    ├─┬ [email protected] invalid: "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint, "^11.8.3" from node_modules/.pnpm/[email protected][email protected]/node_modules/eslint -> .\node_modules\.pnpm\g[email protected]\node_modules\got
    │ └─┬ [email protected] -> .\node_modules\.pnpm\e[email protected]\node_modules\express
    │   └── [email protected] -> .\node_modules\.pnpm\c[email protected]\node_modules\cookie
    └─┬ [email protected] invalid: "^1.15.0" from node_modules/.pnpm/[email protected]/node_modules/source-map-support, "^4.31.0" from node_modules/.pnpm/[email protected]/node_modules/rxjs, "~1.14.0" from node_modules/.pnpm/[email protected]/node_modules/esprima -> .\node_modules\.pnpm\w[email protected]\node_modules\webpack
      └─┬ [email protected] -> .\node_modules\.pnpm\m[email protected][email protected]\node_modules\mini-css-extract-plugin
        └─┬ [email protected] -> .\node_modules\.pnpm\w[email protected][email protected]\node_modules\webpack-dev-server
          └─┬ [email protected] -> .\node_modules\.pnpm\e[email protected]\node_modules\express
            └── [email protected] deduped -> .\node_modules\.pnpm\c[email protected]\node_modules\cookie

Beschreibung

Das Package wird von einer ESLint dependency verwendet. Vielleicht löst sich das Problem, wenn klar ist, wie wir mit @northware/eslint-config umgehen sollen