You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
CVE-2021-23358 affects the `underscore` library which is used by `jsonpath` in `asl-validator`.
`asl-validator` 1.8.* use `jsonpath` 1.0.* which use `underscore` 1.7.0, affected by the CVE.
`asl-validator` 1.9.* use `jsonpath` 1.1.* which use `underscore` 1.12.1, which is the earliest fixed version.
Also replace all `http://npm.paesslergmbh.de:4873` by `https://registry.npmjs.org` in `package-lock.json` because the url looked dead to me. I also don't understand why it was here...
0 commit comments