Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump glob to 10.3.10 (latest). #822

Merged
merged 1 commit into from
Dec 22, 2023
Merged

Bump glob to 10.3.10 (latest). #822

merged 1 commit into from
Dec 22, 2023

Commits on Dec 15, 2023

  1. Bump glob to 10.3.10 (latest). 

    The dependency glob was pinned to version 7.1.6, which depended on a
package called inflight. inflight is unmainted, and currently has a
memory leak vulnerability, classified high severity.

New major releases of glob do not rely on this vulnerable dependency.
    Patrick Nappa committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    305c2eb View commit details
    Browse the repository at this point in the history