Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

dependency vulnerability: cookie accepts cookie name, path, and domain with out of bounds characters #31 #4262

Open
rysweet opened this issue Nov 18, 2024 · 0 comments
Open

dependency vulnerability: cookie accepts cookie name, path, and domain with out of bounds characters #31 #4262

rysweet opened this issue Nov 18, 2024 · 0 comments
Assignees
@victordibia
Labels
proj-studio Related to AutoGen Studio.
Milestone
0.4.0

Comments

@rysweet
Copy link
Collaborator

rysweet commented Nov 18, 2024

What happened?

https://github.com/microsoft/autogen/security/dependabot/31

What did you expect to happen?

see https://github.com/microsoft/autogen/security/dependabot/31

How can we reproduce it (as minimally and precisely as possible)?

see https://github.com/microsoft/autogen/security/dependabot/31

AutoGen version

0.4

Which package was this bug in

AutoGen Studio

Model used

No response

Python version

No response

Operating system

No response

Any additional info you think would be helpful for fixing this bug

No response
@rysweet rysweet added the proj-studio Related to AutoGen Studio. label Nov 18, 2024
@rysweet rysweet added this to the 0.4.0 milestone Nov 18, 2024
victordibia added a commit that referenced this issue Nov 23, 2024
@victordibia
update yarn.lock, closes #4260 #4262
4646c4e
victordibia added a commit that referenced this issue Nov 23, 2024
@victordibia
remove deps for now with vulnerabilities found by dependabot #4262
c27e782
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@victordibia victordibia

Labels
proj-studio Related to AutoGen Studio.
Projects
None yet
Milestone
0.4.0
Development

No branches or pull requests
2 participants
@victordibia @rysweet