Rob Fellows created NIFI-15235:
----------------------------------
Summary: Bump glob and js-yaml to address CVEs
Key: NIFI-15235
URL: https://issues.apache.org/jira/browse/NIFI-15235
Project: Apache NiFi
Issue Type: Task
Components: Core UI
Reporter: Rob Fellows
Assignee: Rob Fellows
glob 10.2.0 - 10.4.5
Severity: high
glob CLI: Command injection via -c/--cmd executes matches with shell:true -
[https://github.com/advisories/GHSA-5j98-mcp5-4vw2]
js-yaml <3.14.2 || >=4.0.0 <4.1.1
Severity: moderate
js-yaml has prototype pollution in merge (<<) -
[https://github.com/advisories/GHSA-mh29-5h37-fv8m]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
