Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerability in firefox-profile dependency #2716

Closed
Araxeus opened this issue Apr 8, 2023 · 2 comments
Closed

Vulnerability in firefox-profile dependency #2716

Araxeus opened this issue Apr 8, 2023 · 2 comments
Assignees
@willdurand
Labels
component: code quality state: blocked by upstream

Comments

@Araxeus
Copy link

Araxeus commented Apr 8, 2023 •
edited

Is this a feature request or a bug?

╰─ yarn why xml2js -R                                                                                                ─╯
└─ my-extension@workspace:.
   └─ web-ext@npm:7.6.0 (via npm:^7.6.0)
      └─ firefox-profile@npm:4.2.2 (via npm:4.2.2)
         └─ xml2js@npm:0.4.23 (via npm:~0.4.23)

https://security.snyk.io/vuln/SNYK-JS-XML2JS-5414874

https://github.com/saadtazi/firefox-profile-js
@willdurand
Copy link
Member

See: saadtazi/firefox-profile-js#135

@willdurand willdurand self-assigned this Apr 11, 2023
@Araxeus
Copy link
Author

Araxeus commented Apr 12, 2023

Fixed by #2721

@Araxeus Araxeus closed this as completed Apr 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@willdurand willdurand

Labels
component: code quality state: blocked by upstream
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@willdurand @Araxeus