Skip to content

Conversation

@rebeccaalpert
Copy link
Member

@rebeccaalpert rebeccaalpert commented Jul 15, 2025

Syntax highlighter has a sub-dependency with a vulnerability. It has not yet been fixed. I would like to drop this for now since it is purely visual and we can investigate a more PatternFly solution. This dependency was brought in by Rohit during early development. I honestly haven't seen many examples where LLMs were specifying the language in code blocks, and this would only impact code blocks with a specified language.

As an alternative, we can manually override some things and keep using this, but I'm concerned that it hasn't been a priority to merge fixes for this. There have been PRs up since March: https://github.com/react-syntax-highlighter/react-syntax-highlighter/pulls.

Before After
Screenshot 2025-07-15 at 11 55 28 AM Screenshot 2025-07-15 at 12 02 15 PM

@rebeccaalpert rebeccaalpert linked an issue Jul 15, 2025 that may be closed by this pull request
@rebeccaalpert rebeccaalpert marked this pull request as ready for review July 15, 2025 15:54
@patternfly-build
Copy link

patternfly-build commented Jul 15, 2025

@rebeccaalpert rebeccaalpert marked this pull request as draft July 15, 2025 15:57
Syntax highlighter has a sub-dependency with a vulnerability. It has not yet been fixed. I would like to drop this for now and we can investigate a more PatternFly solution. This dependency was brought in by Rohit during early development.
@rebeccaalpert rebeccaalpert marked this pull request as ready for review July 15, 2025 16:04
@rebeccaalpert rebeccaalpert merged commit ea97a5f into patternfly:main Jul 28, 2025
5 checks passed
rebeccaalpert added a commit to rebeccaalpert/virtual-assistant that referenced this pull request Oct 24, 2025
Syntax highlighter has a sub-dependency with a vulnerability. It has not yet been fixed. I would like to drop this for now and we can investigate a more PatternFly solution. This dependency was brought in by Rohit during early development.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

prismjs: vulnerability: GHSA-x7hr-w5r2-h6wg

4 participants