File not found: .../vibranium/src/res/ui/index.html

Current documentation: link

• Redesign the documentation with better UI
• Setup script to convert markdown to UI
• Include a global search that can find the text from any page

It has been identified that the time shown per endpoint in the generated html report is wrong and needs to be fixed.

Currently the datasets for test cases are stored in the vibranium module itself.
Most of them are now available as a separate library. Use the library in vibranium instead of storing the data here.
This helps in reducing the module size and also keep the data generation logic separate.

Create a test with . in the url.
It gets converted to some random character during execution.

Remediation

Upgrade node-forge to version 0.10.0 or later. For example:

"dependencies": {
  "node-forge": ">=0.10.0"
}

or…

"devDependencies": {
  "node-forge": ">=0.10.0"
}

Always verify the validity and compatibility of suggestions with your codebase.

Details

CVE-2020-7720: high severity
Vulnerable versions: < 0.10.0
Patched version: 0.10.0

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function.
Note: Version 0.10.0 is a breaking change removing the vulnerable functions.