Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

vulnerable dependency (high severity) #298

Closed
limonte opened this issue Apr 28, 2019 · 2 comments · Fixed by #295
Closed

vulnerable dependency (high severity) #298

limonte opened this issue Apr 28, 2019 · 2 comments · Fixed by #295

Comments

@limonte
Copy link
Contributor

limonte commented Apr 28, 2019

image

image
@orisano orisano mentioned this issue Apr 29, 2019
Merged
4 tasks
@shockey
Copy link

shockey commented May 8, 2019 •
edited
Loading

@palashmon should this be closed? #295 solves the source of the issue but the fix hasn't been released yet 🤔

@siddharthkp can we get a new release that includes #295?

@siddharthkp
Copy link
Owner

Just published 0.17.2 with security patches

shockey added a commit to shockey/swagger-js that referenced this issue May 21, 2019
@shockey
Revert "switch to Conde Nast fork of bundlesize"
7957b8e 
This reverts commit aaa6226.

No longer need to switch, because `bundlesize` maintainers
flighted the fix we need:
siddharthkp/bundlesize#298 (comment)
shockey added a commit to swagger-api/swagger-js that referenced this issue May 21, 2019
@shockey
security: mitigate CVE-2018-20834 (via #1434)
2e4986b 
* fix: support path parameter inclusion when used twice in a path

* fix quote

* switch to Conde Nast fork of `bundlesize`

* Revert "switch to Conde Nast fork of `bundlesize`"

This reverts commit aaa6226.

No longer need to switch, because `bundlesize` maintainers
flighted the fix we need:
siddharthkp/bundlesize#298 (comment)

* bump minimum bundlesize version

* `mocha-webpack` -> `@kyleshockey/mocha-webpack`

* use @kyleshockey/[email protected]

uses a newer chokidar version that doesn't need `tar`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore: update brotli-size version orisano/bundlesize
3 participants
@shockey @siddharthkp @limonte