Skip to content

Pull requests: cliff-security/NodeGoat

New pull request New
14 Open 32 Closed
14 Open 32 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): bump tmp, cypress and selenium-webdriver dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
#46 opened May 28, 2026 by dependabot Bot Loading…
4
fix: braces: upgrade to 3.0.3 to mitigate CVE-2024-4068
#45 opened May 18, 2026 by galanko • Draft
1
fix: Asymmetric Private Key
#41 opened May 18, 2026 by galanko • Draft
15
fix: braces: fails to limit the number of characters it can handle
#35 opened May 15, 2026 by galanko • Draft
fix: inflect vulnerable to Inefficient Regular Expression Complexity (CVE-2021-3820)
#34 opened May 15, 2026 by galanko • Draft
fix: Upgrade debug-dependent packages to address CVE-2017-20165
#33 opened May 15, 2026 by galanko • Draft
4 tasks done
fix: cookie: upgrade csurf to fix input validation bypass (CVE-2024-47764)
#32 opened May 15, 2026 by galanko • Draft
fix: send: Code Execution Vulnerability in Send Library
#31 opened May 15, 2026 by galanko • Draft
fix: serve-static: Improper Sanitization in serve-static
#30 opened May 15, 2026 by galanko • Draft
security: verify brace-expansion is updated to >=1.1.13 (CVE-2026-33750)
#29 opened May 15, 2026 by galanko • Draft
3 tasks done
fix: Upgrade ms from 0.7.1 to 2.0.0 to remediate CVE-2017-20162
#28 opened May 15, 2026 by galanko • Draft
fix: Code injection in fsevents
#27 opened May 15, 2026 by galanko • Draft
fix: micromatch: vulnerable to Regular Expression Denial of Service (CVE-2024-4067)
#26 opened May 15, 2026 by galanko • Draft
fix: upgrade uglify-js to address CVE-2015-8858 ReDoS vulnerability
#25 opened May 15, 2026 by galanko • Draft
ProTip! What’s not been updated in a month: updated:<2026-05-01.