Security Alert: lodash.trimend vulnerability in botbuilder-dialogs

[shahrukhalam123]

Description:

Recently, a security scan revealed a vulnerability related to the use of lodash.trimend v4.5.1 in the botbuilder-dialogs library. This poses a potential security risk, and we need to address this issue promptly.

Vulnerability Details:

The vulnerability is related to lodash.trimend v4.5.1 , and it has been flagged in the security scan. More details about the specific vulnerability can be found

Regular Expression Denial of Service (ReDoS)
https://security.snyk.io/vuln/SNYK-JS-LODASH-1018905
lodash/lodash#5643
GHSA-29mw-wpgm-hmr9

Proposed Fix:

To fix this security vulnerability, it is recommended to upgrade lodash.trimend to a version that addresses the reported issue. Please consider updating the dependency to the latest version which resolves the security concern.

Affected Component:

Library: botbuilder-dialogs
Dependency: lodash.trimend v4.5.1

Labels:

security
botbuilder-dialogs
lodash.trimend

[tracyboehrer]

Should have been corrected in latest release.