You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
cyberchef-node is currently using jsonpath-plus version ^7.2.0, which has a known vulnerability identified as CVE-2024-21534. This vulnerability poses security risks, and it is recommended to upgrade to at least version 10.0.0 where the issue has been addressed.
Proposed Solution:
Update the jsonpath-plus dependency in package.json to ^10.0.0 or later.
Steps to Reproduce:
Inspect package.json to find jsonpath-plus at version ^7.2.0.
Run security scans to confirm vulnerability (CVE-2024-21534).
Expected Outcome:
After upgrading, the project should no longer be vulnerable to CVE-2024-21534, and all functionalities depending on jsonpath-plus should remain intact.
The text was updated successfully, but these errors were encountered:
Issue Description:
cyberchef-node is currently using jsonpath-plus version ^7.2.0, which has a known vulnerability identified as CVE-2024-21534. This vulnerability poses security risks, and it is recommended to upgrade to at least version 10.0.0 where the issue has been addressed.
Proposed Solution:
Update the jsonpath-plus dependency in package.json to ^10.0.0 or later.
Steps to Reproduce:
Inspect package.json to find jsonpath-plus at version ^7.2.0.
Run security scans to confirm vulnerability (CVE-2024-21534).
References:
CVE-2024-21534
jsonpath-plus v10.0.0 release notes
Expected Outcome:
After upgrading, the project should no longer be vulnerable to CVE-2024-21534, and all functionalities depending on jsonpath-plus should remain intact.
The text was updated successfully, but these errors were encountered: