- Issue created by @sreeram_v
Using components with known vulnerability provides an easy attack surface for an attacker to construct and chain attack vectors or payloads.
vulnerable npm package
json-schema
This module has a vulnerable npm package.
You can see this vulnerability by:
1. Download the module
2. Navigate to bootstrap_layout_builder/package-lock.json file
3. Search for the library mentioned above, and you can see the vulnerable package version
Suggestion:
We can upgrade the package version which will resolve the vulnerability.
json-schema version 0.2.3 to 0.4.0
Active
2.1
Code