Skip to content
This repository has been archived by the owner on Dec 1, 2019. It is now read-only.

fix(dependencies): update micromatch and node versions #647

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

gingerchris
Copy link

The current version of micromatch depends on an outdated version of 'set-value' which
contains a security vulnerability (see https://nvd.nist.gov/vuln/detail/CVE-2019-10747)
The latest version of micromatch does not include this dependency, but requires node 8 or greater.

There is a security issue in set-value (https://nvd.nist.gov/vuln/detail/CVE-2019-10747) that is fixed by updating micromatch to the latest version, which does not use set-value
The updated version of micromatch requires node 8 or later.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant