Please report any security issue to security@salesforce.com as soon as it is discovered. This library limits its runtime dependencies in order to reduce the total cost of ownership as much as can be, but all consumers should remain vigilant and have their security stakeholders review all third-party products (3PP) like this one and their dependencies.
Repository navigation
Security: SalesforceCommerceCloud/b2c-developer-tooling
Security
SECURITY.md
-
Path Containment Omission in Services.resolveWithProjectDirectory() and Tool-Annotation Mismatch in createWebDavToolsGHSA-g52w-56c5-674f published
Oct 28, 2026 by claveryHigh
Learn more about advisories related to SalesforceCommerceCloud/b2c-developer-tooling in the GitHub Advisory Database