Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

@vuepress/shared-utils: migrate to newer version of globby #3180

Open
DaanDL opened this issue Oct 26, 2023 · 0 comments
Open

@vuepress/shared-utils: migrate to newer version of globby #3180

DaanDL opened this issue Oct 26, 2023 · 0 comments

Comments

@DaanDL
Copy link

DaanDL commented Oct 26, 2023

Feature request

I received a message from or audit stating that there's a vulnerability breach in on of our packages through vuepress/markdown:

@vuepress/markdown:1.9.10 -->
@vuepress/shared-utils:1.9.10 -->
globby:9.2.0 -->
fast-glob:2.2.7 -->
glob-parent:3.1.0

What problem does this feature solve?

Fixes a vulnerability in glob-parent.

How should this be implemented in your opinion?

Upgrade the globby dependency to the latest version, 13.x, this then has a dependency on a newer version of fast-glob, which uses a newer version of glob-parent.

Are you willing to work on this yourself?

Yes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant