cookiejar Regular Expression Denial of Service via Cookie.parse function
Jaykingamez opened this issue · comments
Describe the bug
Due to the use of superagent 8.0.5, which uses cookiejar version 2.1.3, a vulnerability is present in the latest package, GHSA-h452-7996-h45h.
A simple fix would be to update superagent's version to the latest.
any updates on this ?
any updateds on this?
For any Yarn users waiting on a fix... you can workaround this by adding the following resolutions
field to your package.json:
"resolutions": {
"supertest/**/cookiejar": "^2.1.4"
}