Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Vulnerability (extend@3.0.1) #2638

Closed
k-sai-kiranmayee opened this issue Jun 4, 2019 · 2 comments · Fixed by Team-CONO/Online_Judge-Ver2.0#6 · May be fixed by nshtech/rez-laundry-app#7 or iafrohack/afro-hack-view#13
Closed

Security Vulnerability (extend@3.0.1) #2638

k-sai-kiranmayee opened this issue Jun 4, 2019 · 2 comments · Fixed by Team-CONO/Online_Judge-Ver2.0#6 · May be fixed by nshtech/rez-laundry-app#7 or iafrohack/afro-hack-view#13

Comments

@k-sai-kiranmayee
Copy link

Its a great library, but looks like there might be a security issue with the internal dependency extend@3.0.1

Reference:
https://app.snyk.io/vuln/npm:extend:20180424

Screenshots:
image

Version:
Quill - 1.3.6
@eltimn eltimn mentioned this issue Jun 12, 2019
Closed
@k-sai-kiranmayee
Copy link
Author

Hello :)
When can we expect the release with the fix for this and in which version if it is successfully merged?
Thank you!

jhchen added a commit that referenced this issue Sep 9, 2019
@jhchen
upgrade extend, fixes #2638
544a1f4
lsirivong pushed a commit to voxmedia/quill that referenced this issue Sep 21, 2020
@jhchen @lsirivong
upgrade extend, fixes quilljs#2638
e238b5c
This was referenced Mar 10, 2021
Open
Merged
@dependabot dependabot bot mentioned this issue Mar 18, 2021
Open
@benbro
Copy link
Contributor

benbro commented Feb 2, 2024

Fixed in v1.3.7

@benbro benbro closed this as completed Feb 2, 2024
glock18 pushed a commit to glock18/quill that referenced this issue Apr 15, 2024
@jhchen @glock18
upgrade extend, fixes quilljs#2638
d803e54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
2 participants
@benbro @k-sai-kiranmayee