Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm audit: moderate Deinal of Service vulnerability from handlebars dependency #9134

Closed
MaRuifeng opened this issue Nov 5, 2019 · 2 comments

Comments

@MaRuifeng
Copy link

#8015 馃悰 Bug Report
=== npm audit security report ===

Moderate Denial of Service
Package handlebars
Dependency of jest [dev]
Path jest > jest-cli > @jest/core > @jest/reporters > istanbul-reports > handlebars
More info

To Reproduce

Steps to reproduce the behavior:
npm audit

@SimenB
Copy link
Member

SimenB commented Nov 5, 2019

It specifies handlebars@^4.1.2 which covers any new releases of handlebars, so just update your lockfile

@SimenB SimenB closed this as completed Nov 5, 2019
@github-actions
Copy link

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Please note this issue tracker is not a help forum. We recommend using StackOverflow or our discord channel for questions.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 11, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants