npm-run-all
npm-run-all copied to clipboard
dependency shell-quote CVE-2021-42740
Please upgrade npm package shell-quote
to 1.7.3+
to patch https://github.com/advisories/GHSA-g4rg-993r-mgx7
Until the package gets updated, you can use Yarn's resolutions
or npm's overrides
to override the dependency. For example for Yarn:
{
"devDependencies": {
"npm-run-all": "4.1.5"
},
"resolutions": {
"shell-quote": "1.7.3"
}
}