vue-pdf icon indicating copy to clipboard operation
vue-pdf copied to clipboard

Loader-utils give vue-pdf a critical warning

Open the-missing-pink opened this issue 3 years ago • 1 comments

Loader-utils make that vue-pdf get a critical warning in npm audit.

Message: Prototype pollution in webpack loader-utils url of the warning: https://github.com/advisories/GHSA-76p3-8jx3-jpfq

the-missing-pink avatar Nov 14 '22 12:11 the-missing-pink

The latest possible version of loader-utils that can be installed is 1.4.2 because of the following conflicting dependencies:

[email protected] requires loader-utils@^1.4.0
[email protected] requires loader-utils@^1.0.0 via [email protected]

The earliest fixed version of loader-utils is 2.0.4 (CVE-2022-37601).

andreagobetti avatar May 03 '23 12:05 andreagobetti