ng2-file-upload
ng2-file-upload copied to clipboard
GitHub advisory for all versions >= 0
Have the compromised versions of this package been removed from the npm registry? The advisory, more than 24 hours later, is still saying all versions
ng2-file-upload GitHub Advisory
Our CI/CD pipeline has a dependency on npm audit results and continues to fail until this gets updated to specific affected versions.
I also have this warning in Intellij pointing to : https://osv.dev/vulnerability/MAL-2025-47196
Hi, all compromised versions were deleted, v9.0.0 is as safe as it was.