Snyk Security Risk Report

[fabioimperiolikpmg]

Hi there,
I created a Snyk Security Report which highlighted the following security risk:

Project: surveyjs/surveyjs_angular_cli

I need to buy a licence, but, in order to have my request as approved, I need to know if and when these problems will be addressed.

Thanks in advance,
Fabio

[JaneSjs]

Hello @fabioimperiolikpmg,
Thank you for this report. The issue occurs in the xlsx libary which is referenced as a dependency. The xlsx libary is required for the Export to Excel feature of SurveyJS Tabulator.
We're aware about this security issue in a third-party Tabulator component. We are currently finalizing the next major update for SurveyJS components, version 2.0. As part of this release, we plan to upgrade the SurveyJS Tabulator. For more details, you can refer to the related GitHub issue: Migrate to the newest Tabulator version.

To stay updated on our progress, please visit our Release Notes.

[fabioimperiolikpmg]

HI there,
thanks for you reply.
Can I ask you if you have any release date on plan ? I need to know if there's a clear solution path.

Thanks,
Fabio

[JaneSjs]

Hi @fabioimperiolikpmg,
With v2 of SurveyJS Dashboard, we updated the Tabulator version to v6.2.5. You may want to upgrade the version of the third-party xlsx library in your application.

Should you have any further questions, please let us know.