Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerability issue: Memory Leak in inquirer@5.2.0 as dependency through eslint 5.​4.​0 #1319

Closed
VlkaFenryka opened this issue Jul 8, 2019 · 1 comment
Closed

Vulnerability issue: Memory Leak in inquirer@5.2.0 as dependency through eslint 5.​4.​0 #1319

VlkaFenryka opened this issue Jul 8, 2019 · 1 comment
Milestone
standard 13

Comments

@VlkaFenryka
Copy link

What version of standard?
12.0.1

What operating system, Node.js, and npm version?
OS: Win 10 x64 build 1809
Node: 10.16.0
NPM: 6.9.0

The Problem
https://www.sourceclear.com/vulnerability-database/security/memory-leak/javascript/sid-20567

Solution
update to eslint >= 6.0.0 and therefore update to inquirer@6.4.0
https://github.com/eslint/eslint/releases
https://github.com/SBoudrias/Inquirer.js/releases/tag/inquirer%406.4.0
@feross
Copy link
Member

feross commented Jul 10, 2019

Thanks for the issue. This is not an actually security risk since standard is used during development time and not accessible to attackers.

Nonetheless, standard 13 will be released shortly (#1318) which will update to eslint 6 and fix this issue.

@feross feross added this to the standard v13 milestone Jul 10, 2019
@feross feross closed this as completed Jul 10, 2019
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Oct 28, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
The Standard Project
Archived in project
Milestone
standard 13
Development

No branches or pull requests
2 participants
@feross @VlkaFenryka