New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: fixed version ua-parser-js - package has been hijacked #6

Closed

SuperOleg39 wants to merge 1 commit into wessberg:master from SuperOleg39:chore/fixed-ua-parser-js

SuperOleg39 commented Oct 22, 2021

0.7.29 version already has some dangerous code


          chore: fixed version ua-parser-js - package has been hijacked

cdc0ecb

Author

SuperOleg39 commented Oct 22, 2021

@wessberg @jaredpalmer fyi faisalman/ua-parser-js#536

hom3chuk commented Oct 25, 2021

as per latest on security advisory GHSA-pjwm-rvh2-c87w ^0.7.30 or ^1.0.1 are safe

Author

SuperOleg39 commented Oct 25, 2021 •

edited

Yep, ^0.7.28 still safe too, will close PR, thx for reminding

SuperOleg39 closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment