npm/fallow: low 3.3
Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
Action: Upgrade fallow to 3.34.0 or later.
npm i fallow@3.34.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.34.0 | - |
Fixed versions
| 3.34.0 |
Sources
- osv: GHSA-h4fr-cmh5-qr62
- https://github.com/fallow-rs/fallow/security/advisories/GHSA-h4fr-cmh5-qr62
- https://github.com/fallow-rs/fallow/pull/3548
- https://github.com/fallow-rs/fallow/commit/133d4c862c74f4b1f0a7417c65b7157c1144294d
- https://github.com/fallow-rs/fallow
- https://github.com/fallow-rs/fallow/releases/tag/v3.34.0
published · modified · JSON