You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Checked next-gen ES issues and syntax problems by using the same environment and/or transpiler configuration without Mocha to ensure it isn't just a feature that actually isn't supported in the environment in question or a bug in your code.
'Smoke tested' the code to be tested by running it outside the real test suite to get a better sense of whether the problem is in the code under test, your usage of Mocha, or Mocha itself
Ensured that there is no discrepancy between the locally and globally installed versions of Mocha. You can find them with: node_modules/.bin/mocha --version(Local) and mocha --version(Global). We recommend that you not install Mocha globally.
Description
Mocha depends on minimatch which includes a security vulnerability described here
Prerequisites
faq
labelnode_modules/.bin/mocha --version
(Local) andmocha --version
(Global). We recommend that you not install Mocha globally.Description
Mocha depends on
minimatch
which includes a security vulnerability described hereSteps to Reproduce
N/A
Expected behavior:
Passes security scans (Prisma Cloud)
Actual behavior:
Fails security scans
Reproduces how often: [What percentage of the time does it reproduce?]
100%
Versions
All
Additional Information
https://huntr.dev/bounties/e4e1393c-d590-4492-9f43-8be3f3321629/
isaacs/minimatch#146
The text was updated successfully, but these errors were encountered: