react-timeseries-charts icon indicating copy to clipboard operation
react-timeseries-charts copied to clipboard

Published 20 hours ago • verified publisher icon esnet

Updated all dependencies to latest minor/patch versions

Open ericve25 opened this issue 3 years ago • 1 comments

A critical security vulnerability in older versions of loader-utils is included in this project's current dependency tree. https://security.snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105 Updated all dependencies to latest minor/patch versions to mitigate this issue. Also removed devDependency dsv-loader as it pinned a very old, vulnerable version of loader-utils and didn't seem to actually be used anywhere in the dev scripts. Tested all example pages locally in the website, and all appear working after this update.

ericve25 avatar Nov 30 '22 00:11 ericve25

@sartaj10 @pjm17971 this is ready for review. Would you be able to take a look here to see if this is mergeable to resolve the security vulnerability?

ericve25 avatar Nov 30 '22 00:11 ericve25