Search results

[GHSA-2g4f-4pwh-qvx6] ajv@6.12.6: ReDoS when using $data option

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#114 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-g9mf-h72j-4rw9] undici@7.16.0: Unbounded decompression chain

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#113 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-mw96-cpmx-2vgc] rollup@4.52.0: Arbitrary File Write via Path Traversal

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#112 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-38c4-r59v-3vqw] markdown-it@14.1.0: ReDoS

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#111 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-5j98-mcp5-4vw2] glob@10.4.5: Command injection via -c/--cmd

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#110 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-mh29-5h37-fv8m] js-yaml@3.14.1: Prototype pollution in merge

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#109 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-xxjr-mmjv-4gpg] lodash@4.17.21: Prototype Pollution in _.unset and _.omit

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#108 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

[GHSA-23c5-xmqv-rm74] minimatch@3.1.2: ReDoS via nested extglobs

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#107 In conductor-oss/javascript-sdk;

· nthmost-orkes opened on Feb 27, 2026

SDK doesn't accurately represent task types

Status: Open.

#99 In conductor-oss/javascript-sdk;

· matt-sanders opened on Jan 8, 2026

Cannot update workflow without accessing deprecated methods

Status: Open.

#95 In conductor-oss/javascript-sdk;

· matt-sanders opened on Nov 28, 2025

Unable to implement multiple branches with <code>forkTask</code>

Status: Open.

#94 In conductor-oss/javascript-sdk;

· matt-sanders opened on Nov 27, 2025

NULL case not handled in TASK Poller.

Status: Open.

#83 In conductor-oss/javascript-sdk;

· Akash-Sheoran opened on Sep 30, 2025