Skip to content

There is a vulnerability in ssri 6.0.1 ,upgrade recommended #311

Closed

Description

@QiAnXinCodeSafe

ssri@^6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/ssri/-/ssri-6.0.1.tgz#2a3c41b28dd45b62b63676ecb74001265ae9edd8"
integrity sha512-3Wge10hNcT1Kur4PDFwEieXSCMCJs/7WvSACcrMYrNp+b8kDL1/0wJch5Ni2WrtwEa2IO8OsVfeKIciKCDx/QA==

CVE-2021-27290

Recommended upgrade version:6.0.2

Activity

  1. juzhiyuan commented on Apr 21, 2021

    @juzhiyuan
    Member

    Hi, just checked and wait for https://docusaurus.io/ to fix. Actually we don't have input chance in website, the same as #312

  2. added
    DependenciesPull requests that update a dependency file
    and removed on Apr 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    DependenciesPull requests that update a dependency file

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions