Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Vulnerability 1012 - Need new release

See original GitHub issue

Hey,

There is currently a security vulnerability in your released package 4.1.0 https://www.npmjs.com/advisories/1012

It is due to the version of braces being used, however it looks like that’s been fixed in master. Will there be a release any time soon?

Issue Analytics

State:
Created 4 years ago
Reactions:1
Comments:6 (2 by maintainers)

Top GitHub Comments

3reactions

johnjbartoncommented, Jul 12, 2019

Please don’t open issues about these vulnerabilities. We already get tons of notifications and annoying panels in the UI.

If this is important to you, send a PR to fix it.

1reaction

ionut-tcommented, Jul 12, 2019

Hi, I’m getting 110 high severity vulnerabilities in an Angular project, all related to set-value package. Message below:

High: Prototype Pollution
Package: set-value
Patched in >=3.0.1
Dependency of karma [dev]
Path: karma > chokidar > readdirp > micromatch > snapdragon > base > cache-base > union-value > set-value More info: https://npmjs.com/advisories/1012