Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[@rollup/plugin-commonjs]: vulnerability in inflight #1691

Open
AndreyKovanov opened this issue Feb 28, 2024 · 0 comments · May be fixed by #1695
Open

[@rollup/plugin-commonjs]: vulnerability in inflight #1691

AndreyKovanov opened this issue Feb 28, 2024 · 0 comments · May be fixed by #1695

Comments

@AndreyKovanov
Copy link

  • Rollup Plugin Name: @rollup/plugin-commonjs
  • Rollup Plugin Version: 25.0.7

@rollup/plugin-commonjs depends on inflight and it is vulnerable.
https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

 @rollup/plugin-commonjs@25.0.7
  └─┬ glob@8.1.0
    └── inflight@1.0.6

Expected Behavior

@rollup/plugin-commonjs package doesn't depend on inflight package

Actual Behavior

@rollup/plugin-commonjs package depends on inflight package

Additional Information

To fix the vulnerability need to update glob package to version 10+

@younggglcy younggglcy linked a pull request Mar 17, 2024 that will close this issue
9 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant