evansrobert

posibility of a 2.3.4 release with less strict cheerio version dependency

4

Hi, @jherdman @ivanvotti, I'd like to report a vulnerability introduced by package **css-what**: ### Issue Description I noticed that a vulnerability is introduced in **[email protected]_**: Vulnerability **CVE-2021-33587** affects package **_css-what_**...

a 4.5.12 release for @feathersjs/socketio with less strict socket.io version dependency

1

Hi, @daffl, there is a high severity vulnerability introduced by package **engine.io**: ### Issue Description I noticed that a vulnerability is introduced in **_@feathersjs/[email protected]_**: Vulnerability **CVE-2020-36048** (high severity) affects package...

release patch for @beemo/core 1.1.x with updated dependency hygen

1

Hi, @milesj, ### Issue Description When I build my project, I notice that a vulnerability [**SNYK-JS-EJS-1049328**](https://snyk.io/vuln/SNYK-JS-EJS-1049328) detected in package **ejs

Hi, @egoist, ### Issue Description I noticed that a vulnerability is introduced in **[email protected]_**: Vulnerability **CVE-2020-28469** affects package **_glob-parent_** (versions:=0.9.0) transitively depends on **[email protected]** which has fixed the vulnerability [**CVE-2020-28469**](https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905)._...

Is it possible to remove the vulnerability introduced by ajv?

2

Hi, @MikeRalphson, I stumbled upon a high severity vulnerability introduced by package **[email protected]**: ### Issue Description When I build my project, I notice that a vulnerability(high severity) [**CVE-2020-15366**](https://snyk.io/vuln/SNYK-JS-AJV-584908) detected in...

Hi, @codenirvana, ### Issue Description When I build my project, I notice that vulnerability [**CVE-2021-26539**](https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-1070786), [**CVE-2021-26540**](https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-1070780), and [**SNYK-JS-SANITIZEHTML-585892**](https://snyk.io/vuln/SNYK-JS-SANITIZEHTML-585892) detected in package **[email protected]** is directly referenced by **[email protected]_**. However, **[email protected]** is...

posibility of a 2.2.4 release with updated axios

2

Hi, @CompuIves @sbinlondon, ### Issue Description I noticed that a vulnerability is introduced in **[email protected]_**: Vulnerability **CVE-2020-28168** affects package **_axios_** (versions:=0.21.1) has fixed the vulnerability [**CVE-2020-28168**](https://snyk.io/vuln/SNYK-JS-AXIOS-1038255)._ Thank you for your...

Update @schematics/update to remove the vulnerability introduced in schematics-utilities

3

Hi, @nitayneeman, I'd like to report a vulnerability introduced by package **[email protected]**: ### Issue Description I noticed that a vulnerability is introduced in **[email protected] _**: Vulnerability **CVE-2020-7788** (high severity) affects...

Is it possible to remove the vulnerability introduced by package dot-prop?

2

Hi, @stevemao @jimmywarting, I stumbled upon a vulnerability introduced by package **[email protected]**: ### Issue Description When I build my project, I notice that a vulnerability [**CVE-2020-8116**](https://snyk.io/vuln/SNYK-JS-DOTPROP-543489) detected in package **dot-prop(>1.0.1...