High vulnerability for dependency: fs-path

[andzejsw]

High Command Injection Package fs-path Patched in No patch available Dependency of gulp-version-number Path gulp-version-number > fs-path More info https://nodesecurity.io/advisories/661

[dippas]

I'm having this too due to gulp-util being deprecated, can this be fixed, by using updated/alternative packages?

[S-n-d]

Any update on this? This gulp plugin is perfect but impossible to use due to high risk.

[LC43]

if anyone still out there, i've made a PR to fix this. Please have a look and improve it if you can. See #13. thanks! PS: If you want to fix the audit for this packaging using old gulp, check #14 ;)