invenio-app-ils@1.0.0a18 vulnerabilities

Invenio Integrated Library System.

Direct Vulnerabilities

Known vulnerabilities in the invenio-app-ils package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Insecure Defaults

invenio-app-ils is an Invenio App ILS.

Affected versions of this package are vulnerable to Insecure Defaults. Cookies were found to be set without security configuration.

How to fix Insecure Defaults?

Upgrade invenio-app-ils to version 1.0.0a28 or higher.

[,1.0.0a28)