Vulnerabilites fix SNYK-JS-XMLCRYPTO-9459038 SNYK-JS-XMLCRYPTO-9459039

Vulnerabilites fix SNYK-JS-XMLCRYPTO-9459038 SNYK-JS-XMLCRYPTO-9459039

Hello team!

We have found through a vulnerability scan that the plug-in uses version 2.1.3 of xml-crypto
Which is vulnerable to:

Could it be updated in the next version of the plug-in?

Expected behaviour

Fix vulnerability in next versions

Technical details

ROR version: "1.63.0"
ES version: "8.17.4"

Logs and config files

  • Logs and config files are irrelevant to the issue

{“customer_id”: “93949962-8b24-494d-a10c-2c4235dfec20”, “subscription_id”: “6c68a597-eeac-430a-afbc-8432e4fda85e”}

Hello @carlosm

Could it be updated in the next version of the plug-in?

Yes, of course. Our pre-release build already has an updated version of this dependency. I can send it for testing if you wish.