SNYK Tickets Collection

[krisstanton]

These are the Snyk tickets that came up during the past PI and are still active.

Tasks

Beta Give feedback

1. Snyk Medium Vulnerability: follow-redirects Information Exposure #396
   I & A +1
   
2. Snyk Medium Vulnerability: fast-xml-parser Regular Expression Denial of Service (ReDoS) #400
   I & A +1
   
3. Snyk Medium Vulnerability: rexml - Uncontrolled Resource Consumption ('Resource Exhaustion') #401
   I & A +1
   
4. Snyk Medium vulnerability: inflight - Missing Release of Resource after Effective Lifetime #404
   I & A +1
   
5. Snyk High Vulnerability: rexml - Denial of Service (DoS) #403
   I & A +1
   
6. Snyk high vulnerability: Nokogiri Heap-based Buffer Overflow #397
   I & A +1
   
7. Snyk High Vulnerability: rexml - Improper Restriction of XML External Entity Reference ('XXE') Vulnerability #402
   I & A +1
   
8. Snyk Medium vulnerability: rexml - Uncontrolled Resource Consumption ('Resouce Exhaustion') #398
   I & A +1
   
9. Snyk High Vulnerablity: ws Denial of Service (DoS) #405
   +0
   
10. Snyk High Vulnerability: axios Server-side Request Forgery (SSRF) #426
    Added work! +1
11. Snyk High Vulnerability: axios Server-side Request Forgery (SSRF) #427
    Added work! I & A +2