sandpack
sandpack copied to clipboard
Critical Severity Vulnerability in intersection-observer
We actually want to use mdxeditor, which uses @codesandbox/sandpack-react as dependency.
@react-hook/intersection-observer currently still uses a polyfill for the intersection observer. However, we have now received information that the intersection observer contained therein is highly vulnerable. This means that we are not allowed to use MdxEditor. I have also created an issue for this at @react-hook, but wanted to ask if you could update to a newer version or, alternatively (if no version with a fix is released), switch to an alternative solution. I would be happy to assist you with this.
See: https://github.com/jaredLunde/react-hook/issues/318