imagemin-gifsicle icon indicating copy to clipboard operation
imagemin-gifsicle copied to clipboard

Published 20 hours ago • verified publisher icon imagemin

Security issues Vulnerability

Open simotae14 opened this issue 4 years ago • 0 comments

Command npm audit returned the following list of errors with high severity:

  High            Arbitrary File Write                                          

  Package         decompress                                                    

  Patched in      No patch available                                            

  Dependency of   imagemin-gifsicle [dev]                                                                

  Path            imagemin-gifsicle > gifsicle > bin-build > decompress      

  More info       https://npmjs.com/advisories/1217  


  High            Arbitrary File Write                                          

  Package         decompress                                                    

  Patched in      No patch available                                            

  Dependency of   imagemin-gifsicle [dev]                                     

  Path            imagemin-gifsicle > gifsicle > bin-build > download > decompress                                                    

  More info       https://npmjs.com/advisories/1217 


  High            Arbitrary File Write                                          

  Package         decompress                                                    

  Patched in      No patch available                                            

  Dependency of   imagemin-gifsicle [dev]                                     

  Path            imagemin-gifsicle > gifsicle > bin-wrapper > download > decompress                                                    

  More info       https://npmjs.com/advisories/1217

Is there a chance to fix this problem?

simotae14 avatar Feb 28 '20 09:02 simotae14