react-bootstrap-table2 icon indicating copy to clipboard operation
react-bootstrap-table2 copied to clipboard

Published 20 hours ago • verified publisher icon react-bootstrap-table

underscore version needs update

Open suhailtajshaik opened this issue 2 years ago • 2 comments

Describe the bug The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

To Reproduce Steps to reproduce the behavior:

  1. npm install, installs "underscore": "1.9.1". Please help in updating the version of underscore to 1.13.6

suhailtajshaik avatar Oct 10 '22 19:10 suhailtajshaik

This project is dead. You will need to use react-table and customize everything yourself. Sorry. I was using this table about a year ago and built a project with it only to have serious bugs and needed to scrap it all and rebuild all my tables with react-table.

GodAlmighty990 avatar Oct 23 '22 06:10 GodAlmighty990

Since this repository seems to be no longer maintained, a version fix is unlikely. There have been efforts to fork the repository and maintain the fork (or at least bump the versions of dependencies as needed). The most active one I have found yet is: https://github.com/BonnierNews/react-bootstrap-table2

lukekoch avatar Feb 01 '23 15:02 lukekoch