Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update webpack-compression-plugin for v14 to get updated serialize-javascript version #8857

Closed
caalador opened this issue Aug 17, 2020 · 0 comments · Fixed by #8910
Closed

Update webpack-compression-plugin for v14 to get updated serialize-javascript version #8857

caalador opened this issue Aug 17, 2020 · 0 comments · Fixed by #8910
Projects
OLD Vaadin Flow bugs & maintenance (V...

Comments

@caalador
Copy link
Contributor

Current webpack-compression-plugin 3.1.0 has a dependency to serialize-javascript 2.1.2 which has a
severity https://nvd.nist.gov/vuln/detail/CVE-2020-7660

Updating the webpack-compression-plugin to 4.0.1 would bring in a fixed version of serialize-javascript

Issue is present starting from 2.x
@caalador caalador added this to Needs triage in OLD Vaadin Flow bugs & maintenance (Vaadin 10+) via automation Aug 17, 2020
caalador added a commit that referenced this issue Aug 24, 2020
@caalador
Update compression plugin
b431645 
Fixes #8857
@caalador caalador mentioned this issue Aug 24, 2020
Merged
joheriks pushed a commit that referenced this issue Aug 27, 2020
@caalador
Update compression plugin (#8879)
2ae72de 
Fixes #8857
caalador added a commit that referenced this issue Aug 27, 2020
@caalador
Update compression plugin (#8879)
affda2d 
Fixes #8857
caalador added a commit that referenced this issue Aug 27, 2020
@caalador
Update compression plugin (#8879)
5403aef 
Fixes #8857
caalador added a commit that referenced this issue Aug 27, 2020
@caalador
Update compression plugin (#8879)
29c9e9f 
Fixes #8857
This was referenced Aug 27, 2020
Merged
Merged
Merged
caalador added a commit that referenced this issue Aug 27, 2020
@caalador
Update compression plugin (#8879)
228e8f4 
Fixes #8857
caalador added a commit that referenced this issue Aug 27, 2020
@caalador
Update compression plugin (#8879)
c5a787d 
Fixes #8857
denis-anisimov pushed a commit that referenced this issue Aug 31, 2020
@caalador
Update compression plugin (#8879)
9336b2e 
Fixes #8857
denis-anisimov pushed a commit that referenced this issue Aug 31, 2020
@caalador
Update compression plugin (#8879)
42814e2 
Fixes #8857
OLD Vaadin Flow bugs & maintenance (Vaadin 10+) automation moved this from Needs triage to Closed Aug 31, 2020
denis-anisimov pushed a commit that referenced this issue Aug 31, 2020
@caalador
Update compression plugin (#8879)
b86e72b 
Fixes #8857
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
OLD Vaadin Flow bugs & maintenance (V...
Closed
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update compression plugin (#8879) vaadin/flow
1 participant
@caalador