New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

resolve json5 security issue #22

Closed

lemke-ethan opened this issue Feb 24, 2023 · 3 comments · Fixed by #23

Assignees

Contributor

lemke-ethan commented Feb 24, 2023 •

edited

Loading

do not use json5 version < 1.0.2: https://github.com/MFB-Technologies-Inc/react-async-renderer/security/dependabot/12
do not use json5 versions >= 2.0.0, < 2.2.2: https://github.com/MFB-Technologies-Inc/react-async-renderer/security/dependabot/9

lemke-ethan self-assigned this

Contributor Author

lemke-ethan commented Feb 24, 2023 •

edited

Loading

example package

deleted the package lock and node modules and ran npm install. all deps of json5 should be fine now.

Contributor Author

lemke-ethan commented Feb 24, 2023

async renderer

deleted the package lock and node modules and ran npm install. all deps of json5 should be fine now.

lemke-ethan linked a pull request

that will close this issue

22 resolve json5 security issue #23

Merged

Contributor Author

lemke-ethan commented Oct 6, 2023

GHSA-9c47-m6qq-7p4h

lemke-ethan closed this as completed in #23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment