Skip to content

Commit efe801f

Browse files
committed
Fixes #489 - Removes CVE-2024-6531 which has been withdrawn
1 parent b89bb73 commit efe801f

File tree

6 files changed

+1
-111
lines changed

6 files changed

+1
-111
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Retire.js
22

3-
#### What you require you must also retire
3+
**What you require you must also retire**
44

55
There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the [OWASP Top 10](https://www.owasp.org/index.php/Top_10_2013-A9-Using_Components_with_Known_Vulnerabilities) list of security risks and insecure libraries can pose a huge risk to your Web app. The goal of Retire.js is to help you detect the use of JS-library versions with known vulnerabilities.
66

repository/jsrepository-master.json

Lines changed: 0 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -3985,28 +3985,6 @@
39853985
"https://www.herodevs.com/vulnerability-directory/cve-2024-6485"
39863986
]
39873987
},
3988-
{
3989-
"ranges": [
3990-
{
3991-
"atOrAbove": "4.0.0",
3992-
"below": "5.0.0"
3993-
}
3994-
],
3995-
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
3996-
"cwe": ["CWE-79"],
3997-
"severity": "medium",
3998-
"identifiers": {
3999-
"CVE": ["CVE-2024-6531"],
4000-
"githubID": "GHSA-vc8w-jr9v-vj7f"
4001-
},
4002-
"info": [
4003-
"https://github.com/advisories/GHSA-vc8w-jr9v-vj7f",
4004-
"https://nvd.nist.gov/vuln/detail/CVE-2024-6531",
4005-
"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2024-6531.yml",
4006-
"https://github.com/twbs/bootstrap",
4007-
"https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
4008-
]
4009-
},
40103988
{
40113989
"ranges": [
40123990
{

repository/jsrepository-v2.json

Lines changed: 0 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -5545,28 +5545,6 @@
55455545
"https://github.com/advisories/GHSA-9v3m-8fp8-mj99",
55465546
"https://github.com/twbs/bootstrap/issues/28236"
55475547
]
5548-
},
5549-
{
5550-
"atOrAbove": "4.0.0",
5551-
"below": "5.0.0",
5552-
"cwe": [
5553-
"CWE-79"
5554-
],
5555-
"severity": "medium",
5556-
"identifiers": {
5557-
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
5558-
"CVE": [
5559-
"CVE-2024-6531"
5560-
],
5561-
"githubID": "GHSA-vc8w-jr9v-vj7f"
5562-
},
5563-
"info": [
5564-
"https://github.com/advisories/GHSA-vc8w-jr9v-vj7f",
5565-
"https://nvd.nist.gov/vuln/detail/CVE-2024-6531",
5566-
"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2024-6531.yml",
5567-
"https://github.com/twbs/bootstrap",
5568-
"https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
5569-
]
55705548
}
55715549
],
55725550
"extractors": {

repository/jsrepository-v3.json

Lines changed: 0 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -5669,28 +5669,6 @@
56695669
"https://github.com/advisories/GHSA-9v3m-8fp8-mj99",
56705670
"https://github.com/twbs/bootstrap/issues/28236"
56715671
]
5672-
},
5673-
{
5674-
"atOrAbove": "4.0.0",
5675-
"below": "5.0.0",
5676-
"cwe": [
5677-
"CWE-79"
5678-
],
5679-
"severity": "medium",
5680-
"identifiers": {
5681-
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
5682-
"CVE": [
5683-
"CVE-2024-6531"
5684-
],
5685-
"githubID": "GHSA-vc8w-jr9v-vj7f"
5686-
},
5687-
"info": [
5688-
"https://github.com/advisories/GHSA-vc8w-jr9v-vj7f",
5689-
"https://nvd.nist.gov/vuln/detail/CVE-2024-6531",
5690-
"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2024-6531.yml",
5691-
"https://github.com/twbs/bootstrap",
5692-
"https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
5693-
]
56945672
}
56955673
],
56965674
"extractors": {

repository/jsrepository-v4.json

Lines changed: 0 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -5668,28 +5668,6 @@
56685668
"https://github.com/advisories/GHSA-9v3m-8fp8-mj99",
56695669
"https://github.com/twbs/bootstrap/issues/28236"
56705670
]
5671-
},
5672-
{
5673-
"atOrAbove": "4.0.0",
5674-
"below": "5.0.0",
5675-
"cwe": [
5676-
"CWE-79"
5677-
],
5678-
"severity": "medium",
5679-
"identifiers": {
5680-
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
5681-
"CVE": [
5682-
"CVE-2024-6531"
5683-
],
5684-
"githubID": "GHSA-vc8w-jr9v-vj7f"
5685-
},
5686-
"info": [
5687-
"https://github.com/advisories/GHSA-vc8w-jr9v-vj7f",
5688-
"https://nvd.nist.gov/vuln/detail/CVE-2024-6531",
5689-
"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2024-6531.yml",
5690-
"https://github.com/twbs/bootstrap",
5691-
"https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
5692-
]
56935671
}
56945672
],
56955673
"extractors": {

repository/jsrepository.json

Lines changed: 0 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -5487,28 +5487,6 @@
54875487
"https://github.com/advisories/GHSA-9v3m-8fp8-mj99",
54885488
"https://github.com/twbs/bootstrap/issues/28236"
54895489
]
5490-
},
5491-
{
5492-
"atOrAbove": "4.0.0",
5493-
"below": "5.0.0",
5494-
"cwe": [
5495-
"CWE-79"
5496-
],
5497-
"severity": "medium",
5498-
"identifiers": {
5499-
"summary": "Bootstrap Cross-Site Scripting (XSS) vulnerability",
5500-
"CVE": [
5501-
"CVE-2024-6531"
5502-
],
5503-
"githubID": "GHSA-vc8w-jr9v-vj7f"
5504-
},
5505-
"info": [
5506-
"https://github.com/advisories/GHSA-vc8w-jr9v-vj7f",
5507-
"https://nvd.nist.gov/vuln/detail/CVE-2024-6531",
5508-
"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2024-6531.yml",
5509-
"https://github.com/twbs/bootstrap",
5510-
"https://www.herodevs.com/vulnerability-directory/cve-2024-6531"
5511-
]
55125490
}
55135491
],
55145492
"extractors": {

0 commit comments

Comments
 (0)