Skip to content

dependency vulnerability: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS #30 #4260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
rysweet opened this issue Nov 18, 2024 · 0 comments
Assignees
Milestone

Comments

@rysweet
Copy link
Collaborator

rysweet commented Nov 18, 2024

What happened?

https://github.com./microsoft/autogen/security/dependabot/30

What did you expect to happen?

alert is remediated

How can we reproduce it (as minimally and precisely as possible)?

see https://github.com./microsoft/autogen/security/dependabot/30

AutoGen version

0.4

Which package was this bug in

AutoGen Studio

Model used

No response

Python version

No response

Operating system

No response

Any additional info you think would be helpful for fixing this bug

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants