Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

minimist security vulnerability #1409

Open
cdeutsch opened this issue Apr 6, 2022 · 0 comments
Open

minimist security vulnerability #1409

cdeutsch opened this issue Apr 6, 2022 · 0 comments

Comments

@cdeutsch
Copy link

cdeutsch commented Apr 6, 2022

Is there an alternative to portfinder that could be used?

They don't seem super interested in upgrading mkdirp which relies on a vulnerable version of minimist
http-party/node-portfinder#112

Unfortunately my company has a mono-repo and this bar is pretty much constantly there due to NPM dependencies, and I keep getting a hard time about it 😬

minimist CVE:
GHSA-xvch-5gv4-984h

image
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cdeutsch