nw.js icon indicating copy to clipboard operation
nw.js copied to clipboard
verified publisher icon nwjs

CVE-2020-28499 Please update merge

Open jssuttles opened this issue 3 years ago • 2 comments

The latest version of nw (0.68.0) still relies on merge ^1.2.0. The earliest fixed version is 2.1.1.

jssuttles avatar Sep 12 '22 17:09 jssuttles

Please elaborate on the dependency.

rogerwang avatar Sep 22 '22 15:09 rogerwang

That's to do with the npm-installer. Afk right now - I can open a PR to update this on Monday.

ayushmanchhabra avatar Sep 25 '22 18:09 ayushmanchhabra

Duplicate of https://github.com/nwjs/npm-installer/issues/85

ayushmanchhabra avatar Sep 26 '22 17:09 ayushmanchhabra

That's to do with the npm-installer. Afk right now - I can open a PR to update this on Monday.

Thanks. Then the issue should be filed and tracked there. Closing this one.

rogerwang avatar Sep 26 '22 20:09 rogerwang