-
Notifications
You must be signed in to change notification settings - Fork 9
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Description
There is a moderate vulnerability issue on the version "dmno": "^0.0.39". Please bump vite package
$ pnpm audit
┌─────────────────────┬────────────────────────────────────────────────────────┐
│ moderate │ vite allows server.fs.deny bypass via backslash on │
│ │ Windows │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Package │ vite │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Vulnerable versions │ >=5.2.6 <=5.4.20 │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Patched versions │ >=5.4.21 │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Paths │ .>dmno>vite │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ More info │ https://github.com/advisories/GHSA-93m4-6634-74q7 │
└─────────────────────┴────────────────────────────────────────────────────────┘
1 vulnerabilities found
Severity: 1 moderate
### Motivation
_No response_
### Proposed Solution
_No response_
### Alternatives
_No response_
### Additional Information
_No response_
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request