Skip to main content

Tuleap 16 est là ! Assistez à l'événement virtuel le 17 octobre à 10h30. Inscrivez-vous ici !

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #39362 path-to-regexp: 0.1.7 -> 0.1.10
    Actions
    Infos
    #39362
    Thomas Gerbet (tgerbet)
    2024-09-10 13:48
    2024-09-10 10:41
    40974
    Details
    path-to-regexp: 0.1.7 -> 0.1.10

    Fixes GHSA-9wv6-86v2-598j (CVE-2024-45296) (no real impact in our case, the ReDoS cannot really be triggered).

    Changes:
    https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.10
    https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.9
    https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.8

    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-09-10
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #37897 Tuleap Releases 15.13 Delivered 2024-12-09 17:12 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #39362

    Git commit

    tuleap/tuleap/stable

    chore: request #39362 path-to-regexp: 0.1.7 -> 0.1.10 9725bfa3b9
    User avatar Thomas Gerbet (tgerbet) , 2024-09-10 10:41
    Merge commit 'refs/changes/79/31879/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 7f8ded39dd
    User avatar Kevin Traini (ktraini) , 2024-09-10 13:46
    Referenced by request #39362

    Artifact Tracker v5

    rel #37897 15.13

    Other

    gerrit #31879
    Display settings

    Follow-ups