Skip to content

Conversation

douglance
Copy link
Contributor

No description provided.

@cla-bot cla-bot bot added the cla-signed label Dec 11, 2024
// https://github.com/advisories/GHSA-mwcw-c2x4-8c55
// nanoid infinite loop vulnerability when handling non-integer values
// Only used by mocha for test file IDs during test execution, not in production code
// from: hardhat>mocha>nanoid
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cant you just bump nanoid?

@douglance douglance merged commit 31852e2 into main Dec 11, 2024
21 checks passed
@spsjvc spsjvc deleted the dl/GHSA-mwcw-c2x4-8c55 branch December 12, 2024 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants