secure-code-warrior-for-github[bot] comments

Results 40 comments of


                                            secure-code-warrior-for-github[bot]

chore(deps): update dependency eslint to v9

### Micro-Learning Topic: External entity injection (Detected by phrase) #### Matched on "XXe" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Module_23_XML_External_Entity_Injection_v2.mp4)* An XML External Entity attack is a type of attack against an...

[Snyk] Fix for 1 vulnerabilities

### Micro-Learning Topic: Open redirect (Detected by phrase) #### Matched on "Open Redirect" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Unvalidated_Redirects_and_Forwards_v2.mp4)* This vulnerability refers to the ability of an attacker to arbitrarily perform...

[Snyk] Security upgrade redcarpet from 3.5.0 to 3.5.1

### Micro-Learning Topic: Reflected Cross-Site Scripting (Detected by phrase) *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Module_73_Reflected_Cross+Site+Scripting_v2.mp4)* Reflected cross-site scripting vulnerabilities occur when unescaped input is displayed in the resulting page displayed to...

[Snyk] Fix for 1 vulnerabilities

### Micro-Learning Topic: Denial of service (Detected by phrase) The Denial of Service (DoS) attack is focused on making a resource (site, application, server) unavailable for the purpose it was...

Bump express from 4.18.2 to 4.19.2

### Micro-Learning Topic: Open redirect (Detected by phrase) #### Matched on "open redirect" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Unvalidated_Redirects_and_Forwards_v2.mp4)* This vulnerability refers to the ability of an attacker to arbitrarily perform...

build(deps): bump vuetify from 2.6.1 to 2.6.12

### Micro-Learning Topic: Cross-site scripting (Detected by phrase) #### Matched on "XSS" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Module_71_Cross+Site+Scripting_v2.mp4)* Cross-site scripting vulnerabilities occur when unescaped input is rendered into a page displayed...

chore(deps): bump engine.io and browser-sync in /javascript

### Micro-Learning Topic: Denial of service (Detected by phrase) #### Matched on "denial of service" The Denial of Service (DoS) attack is focused on making a resource (site, application, server)...

chore(deps-dev): bump @types/express from 4.17.13 to 4.17.17

### Micro-Learning Topic: External entity injection (Detected by phrase) #### Matched on "Xxe" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Module_23_XML_External_Entity_Injection_v2.mp4)* An XML External Entity attack is a type of attack against an...

chore(deps-dev): bump @storybook/jest from 0.0.11-next.0 to 0.0.11--canary.22.2783ae7.0

### Micro-Learning Topic: External entity injection (Detected by phrase) #### Matched on "xXe" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/Module_23_XML_External_Entity_Injection_v2.mp4)* An XML External Entity attack is a type of attack against an...

Bump json5 from 2.2.0 to 2.2.3

### Micro-Learning Topic: Prototype pollution (Detected by phrase) #### Matched on "prototype pollution" *[What is this? (2min video)](https://media.securecodewarrior.com/v2/module_138_mass_assignment.mp4)* By adding or modifying attributes of an object prototype, it is possible...