Uploaded image for project: 'Magnolia CLI'
  1. Magnolia CLI
  2. NPMCLI-198

high-severity security vulnerability "npm:adm-zip:20180415"

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 3.0.7
    • None
    • Yes
    • Foundation 6
    • 3

    Description

      Magnolia cli has a dependency on an old version of adm-zip which has a security vulnerability. More info here: https://snyk.io/vuln/npm:adm-zip:20180415

      Please update the dependency, so that I can have magnolia-cli approved by my security team.

      Checklists

        Acceptance criteria

        Attachments

          Issue Links

            caused by

            Bug - A problem which impairs or prevents the functions of the product. NPMCLI-182 CLI jumpstart fails - due to regression in adm-zip dependency

            • Critical - Crashes, loss of data, severe memory leak.
            • Closed
            supersedes

            Task - A task that needs to be done. NPMCLI-186 Unpin adm-zip dependency or replace it with a different library

            • Neutral -
            • Closed

            Activity

              People

                fgrilli Federico Grilli
                Sam Samantha Mannino
                Votes:
                1 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Checklists

                    Bug DoR
                    Task DoD

                    Jenkins Builds

                      No builds found.