Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Noticed security issue async #392

Closed
JackHowa opened this issue Apr 18, 2022 · 3 comments
Closed

Noticed security issue async #392

JackHowa opened this issue Apr 18, 2022 · 3 comments

Comments

@JackHowa
Copy link

JackHowa commented Apr 18, 2022 •
edited
Loading

Saw the nested alert with the vulnerability to async. GHSA-fwr7-v2mv-hh25

Let me know if any one else is looking to potentially update before spelunking

Looks like the relevant issue may be with ejs and potentially unneeded dep mde/ejs#659
@JackHowa JackHowa mentioned this issue Apr 20, 2022
Closed
@JackHowa
Copy link
Author

@jondot appreciate your work on hygen -- saves us loads of time. Let me know if you have time to go over a quick deps fix for a security warning #394

@JackHowa
Copy link
Author

JackHowa commented May 5, 2022

@jondot let me know if this is a concern. thanks for the time!

@JackHowa
Copy link
Author

Closed as will not fix

@JackHowa JackHowa closed this as not planned Won't fix, can't repro, duplicate, stale May 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore: Upgrade ejs to fix async security alert from ejs JackHowa/hygen
1 participant
@JackHowa