-
Notifications
You must be signed in to change notification settings - Fork 73
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Security Vulnerability: Upgrade svgo
#245
Labels
Comments
+1 This bug has high severity, would be good to resolve! |
this vulnerability seems completely irrelevant here since svgo in this context is not used on arbitrary user data. it is only used on the SVG files that you add to your project, and most likely you won't try to DoS yourself... 😅 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
🐞 Bug Report
Describe the bug
nth-check@1.0.2
, a transient dependency ofsvgo@2.1.0
, has an Inefficient Regular Expression Complexity vulnerability.svgo@2.1.0
is a dependency ofbroccoli-svg-optimizer@2.1.0
.Expected behavior
There should not be security vulnerability.
Possible Solution
Update
svgo
to v3.0.2 which usesnth-check@2.0.1
as a transient dependency.The text was updated successfully, but these errors were encountered: