Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix markdown-it security vulnerability #431

Closed
RedMickey opened this issue Mar 16, 2020 · 1 comment · Fixed by #437
Closed

Fix markdown-it security vulnerability #431

RedMickey opened this issue Mar 16, 2020 · 1 comment · Fixed by #437
Assignees
@joaomoreno

Comments

@RedMickey
Copy link

Hello, I'm a member of the development team of VS Code extensions for debugging Cordova and React Native applications. A security vulnerabilities was revealed in vscode-vsce package dependencies. The package causing a security issue is markdown-it. Detailed info about the vulnerability is available here. The vulnerability has been already fixed. It’s recommended to update this dependency.
@joaomoreno joaomoreno added the help wanted Issues identified as good community contribution opportunities label Mar 31, 2020
@joaomoreno joaomoreno self-assigned this Mar 31, 2020
@joaomoreno joaomoreno removed the help wanted Issues identified as good community contribution opportunities label Mar 31, 2020
@jamesgeorge007 jamesgeorge007 mentioned this issue Apr 1, 2020
Merged
@jamesgeorge007
Copy link
Contributor

#437

@joaomoreno joaomoreno added bug Issue identified by VS Code Team member as probable bug and removed bug Issue identified by VS Code Team member as probable bug labels Apr 1, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@joaomoreno joaomoreno

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fixed markdown-it security vulnerability jamesgeorge007/vscode-vsce
3 participants
@joaomoreno @jamesgeorge007 @RedMickey