New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE 2021 23424 #56

Merged

aruniverse merged 1 commit into imodeljs from fix/cve-2021-23424

Oct 13, 2021

Member

aruniverse commented Oct 13, 2021

See:


fix cve-2021-23424, see pmmmwh/react-refresh-webpack-plugin#501 and T…

e222fb4

…jatse/ansi-html#19 (comment)

aruniverse requested a review from calebmshafer

October 13, 2021 18:16

calebmshafer approved these changes

View reviewed changes

aruniverse merged commit 0261dd7 into imodeljs

aruniverse deleted the fix/cve-2021-23424 branch

October 13, 2021 19:10

aruniverse added the hacktoberfest-accepted label

jdehorty commented Oct 16, 2021 •

edited

Loading

@aruniverse, @calebmshafer
It would seem that webpack-dev-server used in @bentley/react-scripts (4.0.5) still depends on ansi-html:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment