You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current version of eslint-plugin-import uses tsconfig-paths 3.14.1
The issue with this version is that it's dependency json5 1.0.1 is dependent on minimist 1.2.0 which has a vulnerability
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
The latest version of tsconfig-paths 4.1.2 uses json 2.2.2 which does not have the minimist 1.2.0 dependency/vulnerability.
The text was updated successfully, but these errors were encountered:
This is a duplicate of #2625; a duplicate of #2628; a duplicate of #2626; a duplicate of #2627; a duplicate of #2631; a duplicate of #2632; a duplicate of #2634; a duplicate of #2635; a duplicate of #2636; a duplicate of #2637; a duplicate of #2639; a duplicate of #2642; a duplicate of #2643; a duplicate of #2649; a duplicate of #2655; a duplicate of #2660; a duplicate of #2670; a duplicate of #2692.
The current version of eslint-plugin-import uses tsconfig-paths 3.14.1
The issue with this version is that it's dependency json5 1.0.1 is dependent on minimist 1.2.0 which has a vulnerability
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
The latest version of tsconfig-paths 4.1.2 uses json 2.2.2 which does not have the minimist 1.2.0 dependency/vulnerability.
The text was updated successfully, but these errors were encountered: