BackstopJS icon indicating copy to clipboard operation
BackstopJS copied to clipboard

minimist security vulnerability

Open cdeutsch opened this issue 3 years ago • 0 comments

Is there an alternative to portfinder that could be used?

They don't seem super interested in upgrading mkdirp which relies on a vulnerable version of minimist https://github.com/http-party/node-portfinder/issues/112

Unfortunately my company has a mono-repo and this bar is pretty much constantly there due to NPM dependencies, and I keep getting a hard time about it 😬

minimist CVE: https://github.com/advisories/GHSA-xvch-5gv4-984h

image

cdeutsch avatar Apr 06 '22 20:04 cdeutsch