Skip to content

Conversation

@Isokaeder
Copy link

Again me getting familiar with the code base :D

I noticed npm warning about two vulnerabilities

markdown-it  <12.3.2
Severity: moderate
Uncontrolled Resource Consumption in markdown-it - https://github.com/advisories/GHSA-6vfc-qv3f-vr6c
fix available via `npm audit fix`
node_modules/markdown-it
  vsce  1.26.0 - 2.6.3
  Depends on vulnerable versions of markdown-it
  node_modules/vsce

simple-get  3.0.0 - 3.1.0
Severity: high
Exposure of Sensitive Information in simple-get - https://github.com/advisories/GHSA-wpg7-2c88-r8xv
fix available via `npm audit fix`
node_modules/simple-get

So I thought why not run npm audit fix

@lnicola
Copy link
Member

lnicola commented Feb 6, 2022

bors r+

@bors
Copy link
Contributor

bors bot commented Feb 6, 2022

@bors bors bot merged commit 1dee488 into rust-lang:master Feb 6, 2022
@lnicola lnicola changed the title fix two vulneabilities (moderate: 1, high: 1) by running npm audit minor: fix two vulneabilities (moderate: 1, high: 1) by running npm audit Feb 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants