Skip to content

Doesn't do anything #11

@Lippiece

Description

@Lippiece

I've installed the package, added to bunfig. Then, for example:

❯ bun add express@3.4.5
bun add v1.3.10 (30e609e0)
⚠ Socket Security Scanner free mode. Set SOCKET_API_KEY to use your Socket org settings.
⏳[@socketsecurity/bun-security-scanner] Scanning 93 packages took 1183ms

installed express@3.21.2 with binaries:
 - express

1 package installed [1311.00ms]

Meanwhile:

bun audit v1.3.10 (30e609e0)

express  >=3.4.5 <4.0.0-rc1
  (direct dependency)
  low: Express Open Redirect vulnerability - https://github.com/advisories/GHSA-jj78-5fmv-mv28
  low: express vulnerable to XSS via response.redirect() - https://github.com/advisories/GHSA-qw6h-vgh9-j6wx
  moderate: Express ressource injection - https://github.com/advisories/GHSA-cm5g-3pgc-8rg4
  moderate: Express.js Open Redirect in malformed URLs - https://github.com/advisories/GHSA-rv95-896h-c2vc

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions