You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Trying to work back through each node module for bunyan to fix a vulnerability.
mkdirp@0.5.1 has a vulnerable package minimist@0.0.8 which needs to be fixed. Updating to the latest version of mkdirp will completely remove minimist from the dependency tree.
Trying to work back through each node module for
bunyan
to fix a vulnerability.mkdirp@0.5.1
has a vulnerable packageminimist@0.0.8
which needs to be fixed. Updating to the latest version ofmkdirp
will completely removeminimist
from the dependency tree.Here's the CVE: https://nvd.nist.gov/vuln/detail/CVE-2020-7598
This library hasn't had any movement on it for quite a long time. If it's dead, say it's dead so I can discuss this with the maintainers of
bunyan
The text was updated successfully, but these errors were encountered: