node-csvtojson icon indicating copy to clipboard operation
node-csvtojson copied to clipboard

Bluebird causes js/incomplete-sanitization high security vulnerability

Open mgrybyk opened this issue 1 year ago • 0 comments

Line return str.replace(/([$])/, "\\$"); in bluebird causes js/incomplete-sanitization CodeQL High security vulnerability.

ref: https://github.com/mgrybyk-org/html-trend-report-action/security/code-scanning/1

It would be nice to drop the bluebird completely https://github.com/Keyang/node-csvtojson/issues/339

mgrybyk avatar May 05 '24 20:05 mgrybyk