Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

vulnerabilities #304

Closed
KMBaby-zyl opened this issue Jan 21, 2021 · 3 comments
Closed

vulnerabilities #304

KMBaby-zyl opened this issue Jan 21, 2021 · 3 comments
Milestone
3.2.6

Comments

@KMBaby-zyl
Copy link

https://snyk.io/vuln/npm:[email protected]

this package is vulnerability， so it't not allow to install in my company.
@mabelleeyanhwa
Copy link

Hi, yes, I can see the vulnerability quite clearly here:
https://snyk.io/test/npm/fast-glob/3.2.5
It is introduced through [email protected].

Is this the vulnerability u are referring to?

@eran10
Copy link

eran10 commented Feb 2, 2021

+1

nicholasostman added a commit to nicholasostman/fast-glob that referenced this issue Mar 12, 2021
@nicholasostman
Update package.json
9601061 
Update glob-parent to avoid package vulnerability. mrmlnc#304 (comment)
@nicholasostman nicholasostman mentioned this issue Mar 12, 2021
Closed
@mrmlnc mrmlnc added this to the 3.2.6 milestone Jun 21, 2021
@mrmlnc
Copy link
Owner

mrmlnc commented Jun 21, 2021

Fixed by #315. Will be shipped on this week.

@mrmlnc mrmlnc closed this as completed Jun 21, 2021
@mrmlnc mrmlnc mentioned this issue Jun 23, 2021
Closed
@rntvicente rntvicente mentioned this issue May 24, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
3.2.6
Development

No branches or pull requests
4 participants
@eran10 @KMBaby-zyl @mrmlnc @mabelleeyanhwa