You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello, I'm currently using the latest ejs version (3.1.9) which points to the version of Jake 10.8.5 (https://github.com/mde/ejs/blob/v3.1.9/package.json#L25)
Unfortunately, that version of Jake still uses minimatch@3.0.4 which is being pointed out by Snyk as a vulnerability.
path: ejs@3.1.9 › jake@10.8.5 › minimatch@3.0.4
I see that the jake package already updated its version to 10.8.7 and that version already updated the minimatch.
Do you have any estimation or timeframe for the update to the new version of jake?
Thank you!
The text was updated successfully, but these errors were encountered:
Hello, I'm currently using the latest ejs version (3.1.9) which points to the version of Jake 10.8.5 (https://github.com/mde/ejs/blob/v3.1.9/package.json#L25)
Unfortunately, that version of Jake still uses minimatch@3.0.4 which is being pointed out by Snyk as a vulnerability.
path: ejs@3.1.9 › jake@10.8.5 › minimatch@3.0.4
I see that the jake package already updated its version to 10.8.7 and that version already updated the minimatch.
Do you have any estimation or timeframe for the update to the new version of jake?
Thank you!
The text was updated successfully, but these errors were encountered: