ibm-security icon indicating copy to clipboard operation
ibm-security copied to clipboard

A Carbon-powered React component library built by IBM Security

Results 31 ibm-security issues
Sort by recently updated
recently updated
newest added

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

wontfix
dependencies

Bumps [got](https://github.com/sindresorhus/got) from 11.8.2 to 11.8.5. Release notes Sourced from got's releases. v11.8.5 Backport security fix https://github.com/sindresorhus/got/commit/861ccd9ac2237df762a9e2beed7edd88c60782dc CVE-2022-33987 https://github.com/sindresorhus/got/compare/v11.8.4...v11.8.5 v11.8.3 Bump cacheable-request dependency (#1921) 9463bb6 Fix HTTPError missing .code property...

wontfix
dependencies

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

wontfix
dependencies

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 17.4.7 to 19.0.3. Release notes Sourced from semantic-release's releases. v19.0.3 19.0.3 (2022-06-09) Bug Fixes log-repo: use the original form of the repo url to remove the need...

wontfix
dependencies

Bumps [semver-regex](https://github.com/sindresorhus/semver-regex) from 3.1.3 to 3.1.4. Release notes Sourced from semver-regex's releases. v3.1.4 Backport of ReDoS fix https://github.com/sindresorhus/semver-regex/commit/7712ba564d40da101cf2b2b33e6a910d9f2f57f4 Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=semver-regex&package-manager=npm_and_yarn&previous-version=3.1.3&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will...

wontfix
dependencies

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

wontfix
dependencies

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.3.4. Changelog Sourced from nanoid's changelog. 3.3.4 Fixed --help in CLI (by @​Lete114). 3.3.3 Reduced size (by Anton Khlynovskiy). 3.3.2 Fixed enhanced-resolve support. 3.3.1 Reduced...

wontfix
dependencies

## Bug RadioButton components within RadioButtonGroup components should be able to be selected with the 'Space' key when navigating to them using the keyboard. ### Description While navigating using the...

type: bug
wontfix
status: triage

Bumps [prismjs](https://github.com/PrismJS/prism) from 1.25.0 to 1.27.0. Release notes Sourced from prismjs's releases. v1.27.0 Release 1.27.0 v1.26.0 Release 1.26.0 Changelog Sourced from prismjs's changelog. 1.27.0 (2022-02-17) New components UO Razor Script...

wontfix
dependencies

## Bug The buttons in the Header component, in this case notification and profile buttons, lack support for adding tooltips to clarify the button action. ### Description Tooltips are missing...

type: bug
wontfix
status: triage