Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

formio depends on vm2 package, which has been deprecated due to security vulnerabilities #1715

Closed
fwextensions opened this issue Mar 9, 2024 · 2 comments
Closed

formio depends on vm2 package, which has been deprecated due to security vulnerabilities #1715

fwextensions opened this issue Mar 9, 2024 · 2 comments

Comments

@fwextensions
Copy link

Describe the bug
The package.json file lists vm2 has a dependency. vm2 has been deprecated due to security vulnerabilities:

Version/Branch
3.5

To Reproduce
N/A

Additional context
The readme talks about the deprecation.
@lane-formio
Copy link
Contributor

lane-formio commented Mar 11, 2024 •
edited

Resolved with #1693
This will be a part of the upcoming 4.0.0 official release.

@mgttt
Copy link

mgttt commented Mar 30, 2024

patriksimek/vm2#533 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@fwextensions @mgttt @lane-formio