question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Upgrade `globby` to fix security vulnerability in dependency `glob-parent`

See original GitHub issue

Library Affected: workbox-cli

Browser & Platform: NPM package

Issue or Feature Request Description: I am currently be alerted to workbox-cil having a security vulnerability in it’s dependency glob-parent. It appears that comes from the globby package. I would like to update globby to 12.0.2 to update and fix this dependency.

https://github.com/benniemosher/benniemosher.com/security/dependabot/package-lock.json/glob-parent/open

Screen Shot 2021-08-31 at 8 28 51 AM

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Comments:8 (4 by maintainers)

github_iconTop GitHub Comments

2reactions
jeffposnickcommented, Sep 9, 2021
0reactions
benniemoshercommented, Sep 3, 2021

@jeffposnick Oh perfect, I was expecting to hear months! Rock on! Have a good holiday!

Read more comments on GitHub >

github_iconTop Results From Across the Web

glob-parent Security Vulnerability · Issue #15174 - GitHub
Describe the bug NPM Advisory 1751 You are dependent on an insecure version of glob-parent. To Reproduce Run npm audit System Environment Info:...
Read more >
glob-parent with vulnerability does not fix - Stack Overflow
I'm having a problem updating the glob-parent dependencies, I tried to run the npm audit fix , but it's not being enough.
Read more >
glob-parent - Snyk Vulnerability Database
version published direct vulnerabilities 6.0.2 29 Sep, 2021 0. C. 0. H. 0. M. 0. L 6.0.1 19 Jul, 2021 0. C. 0. H. 0....
Read more >
Upgrading Node.js dependencies after a yarn audit - fettblog.eu
A yarn audit fix does not exist and won't happen! What should I do? Check the lockfile manually? Come on, usually yarn audit...
Read more >
Fixing security vulnerabilities in npm dependencies in less ...
Solution. Solution to this problem is in steps:- npm update. This is the first thing you should do and it's the simplest one...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found