Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

react-scripts has vulnerability in dependencies #6469

Closed
serhiyzablotskiy opened this issue Feb 20, 2019 · 1 comment
Closed

react-scripts has vulnerability in dependencies #6469

serhiyzablotskiy opened this issue Feb 20, 2019 · 1 comment

Comments

@serhiyzablotskiy
Copy link

Hi.
I have an issue with dependencies of react-scripts package.
In the latest version there is a dependency from jest@23.6.0.
But this version of jest is deeply dependent from the braces package.
Here is reported vulnerability in braces package in versions earlier then v2.3.1 https://www.npmjs.com/advisories/786.
But jest@23.6.0. refers to [braces] version before 2.3.1.

This issue should be fixed in jest v24.0.0-alpha.13 and higher.

Can you help to resolve this issue?

@bugzpodder
Copy link

This is tracked in #6443 and it will be addressed in create-react-app v3

@lock lock bot locked and limited conversation to collaborators Feb 25, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants