Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

fix(less): upgrade make-dir to v4 to fix security vulnerability #4250

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

jorenbroekema
Copy link

@jorenbroekema jorenbroekema commented Dec 7, 2023

fixes #3806

What:

Bump make-dir to v4

Why:

There is a security vulnerability in make-dir v2:

$ npm ls semver  
less@4.1.3 project
└─┬ make-dir@2.1.0
       └── semver@5.7.1

Which is fixed in the latest make-dir v4

Checklist:

  • Documentation N\A
  • Added/updated unit tests N\A
  • Code complete N\A

@iChenLei
Copy link
Member

iChenLei commented Dec 7, 2023

Thank you.

@SandeepJoel
Copy link

@iChenLei and @matthew-dean Is there any update on when this PR will be reviewed and merged ? Because the latest versions of packages/less also has this semver vulnerability through old version of make-dir ?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update make-dir to resolve vulnerable dependency
3 participants