Security
CVE-2021-23337
Prototype pollution vulnerability in lodash before 4.17.21 allows attackers to modify object properties via the set, setWith, and update functions.
CVE-2022-24999
The express package before 4.17.3 for Node.js has a Regular Expression Denial of Service vulnerability via the req.fresh property.
Dependency Analysis
Based on the repository's security profile, here are some recommendations:
- Update lodash to version 4.17.21 to fix a high severity vulnerability
- Update express to version 4.17.3 to fix a medium severity vulnerability
- Enable code scanning to detect security vulnerabilities in your code