New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg #724

Closed

fabianszabo opened this issue Jul 1, 2024 · 1 comment

fabianszabo commented Jul 1, 2024

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg

npm explain braces prints this:

braces@3.0.2 dev
node_modules/braces
  braces@"^3.0.2" from micromatch@4.0.5
  node_modules/micromatch
    micromatch@"^4.0.4" from fast-glob@3.3.2
    node_modules/fast-glob
      fast-glob@"^3.3.2" from vite-plugin-pwa@0.20.0
      node_modules/vite-plugin-pwa
        dev vite-plugin-pwa@"^0.20.0" from the root project

The text was updated successfully, but these errors were encountered:

Author

fabianszabo commented Sep 24, 2024 •

edited

Loading

Fixed in:

chore: switch to tinyglobby to drop 15 dependencies #733

Released in v0.20.1

fabianszabo closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment