CVE-2023-45857

Advisory

Pg-bulk-ingest version 0.0.45 specifically pins its localtunnel dependency to mitigate the axios vulnerability identified as CVE-2023-45857.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* docs: add getting started with dagster section by JosefSmith in https://github.com/uktrade/pg-bulk-ingest/pull/165
* docs: adding some basic docs about using high watermarks by JosefSmith in https://github.com/uktrade/pg-bulk-ingest/pull/166
* build(deps): move to govuk-eleventy-plugin v6.0.3 by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/167
* docs: make logo a bit tighter by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/168
* build(deps): pin localtunnel to avoid axios vulnerability by niross in https://github.com/uktrade/pg-bulk-ingest/pull/169
* build(deps): add rollup-linux-x64-gnu as optional dependency by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/170
* build(deps): fix package-lock.json by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/171
* build(deps): fix package-lock.json again by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/172
* build(deps): fix package-lock.json for the third time by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/173
* build(deps): avoid axios vulnrability (again) by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/174
* refactor: use to-file-like-obj by michalc in https://github.com/uktrade/pg-bulk-ingest/pull/175

New Contributors
* niross made their first contribution in https://github.com/uktrade/pg-bulk-ingest/pull/169

**Full Changelog**: https://github.com/uktrade/pg-bulk-ingest/compare/v0.0.44...v0.0.45

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45857
• https://github.com/uktrade/pg-bulk-ingest/pull/169/commits/8a28a4e24361a99c610b499458b2e6b97f793377