You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
That would require a breaking change, and is already being discussed in #2447.
Additionally, this is an invalid CVE; a Prototype Pollution attack in a CLI arg parsing tool (minimist) is a self-attack and thus, not an attack; additionally, https://unpkg.com/browse/tsconfig-paths@3.14.1/package.json depends on a version of minimist that is not vulnerable, so the CVE in no way requires a v4 upgrade.
Hi.
The version of tsconfig-paths used in this project depends on minimist package, which has a critical security vulnerability in a older version.
I think updating it to latest major version of tsconfig-paths that depends on a patched version of minimist should resolve the issue.
The text was updated successfully, but these errors were encountered: