WordPress.org
Get WordPress

Make WordPress Core

Opened 6 months ago

Last modified 6 months ago

#60994 new defect (bug)

Github bot detected some high risk security issue in npm packages.

Reported by: thekt12's profile thekt12 Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Security Keywords:
Focuses: Cc:

Description

The GitHub bot detected some high-risk bugs in the core, mostly within the npm packages being used.

We will need to update packages to resolve this.

​Report Link

Attachments (2)

TaffyDB can allow access to any data items in the DB · Dependabot alert #10 · 10up_wordpress-develop.pdf​ (333.4 KB) - added by thekt12 6 months ago.
Update TaffyDB
security_issue1.pdf​ (500.6 KB) - added by thekt12 6 months ago.
Update webpack-dev-middleware package.

Download all attachments as: .zip

Change History (3)

@thekt12
6 months ago

Update TaffyDB

@thekt12
6 months ago

Update webpack-dev-middleware package.

#1 @thekt12
6 months ago

I realised the original link is only visible to people with member access. So attached pdf for high risk packages.

Note: See TracTickets for help on using tickets.