Low-severity vulnerability in @quasar/app-vite 2.4.0 dependency chain (tmp: GHSA-52f5-9888-hmc6) #18115
Closed
Unanswered
CasperRademaker-AbOvo
asked this question in
General - Components / Directives / etc
Replies: 1 comment
-
|
This seems to be resolved along the way |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
@quasar/app-vite current latest (2.4.0) depends indirectly on tmp 0.0.33 which has this vulnerability: GHSA-52f5-9888-hmc6
See dependency chain at https://npmgraph.js.org/?q=%40quasar%2Fapp-vite%402.4.0
Although Quasar is not necessarily subject to this vulnerability, is there any roadmap to upgrading the dependency chain to more up-to-date versions so that vulnerability audits don't get triggered on this?
Beta Was this translation helpful? Give feedback.
All reactions