Skip to content
This repository has been archived by the owner on Jan 16, 2025. It is now read-only.

CVE-2024-21538, CVE-2024-4067 #291

Open
thekhegay opened this issue Dec 18, 2024 · 0 comments
Open

CVE-2024-21538, CVE-2024-4067 #291

thekhegay opened this issue Dec 18, 2024 · 0 comments

Comments

@thekhegay
Copy link

thekhegay commented Dec 18, 2024

Package CVE Severity Fix Version
micromatch CVE-2024-4067 High 4.0.8
cross-spawn CVE-2024-21538 High 6.0.6, 7.0.5

micromatch usage:
fast-glob PR: mrmlnc/fast-glob#464

@swc/cli 0.3.14
└─┬ fast-glob 3.3.2
  └── micromatch 4.0.7

cross-spawn usage:

@swc/cli 0.3.14
└─┬ @mole-inc/bin-wrapper 8.0.1
  ├─┬ bin-check 4.1.0
  │ └─┬ execa 0.7.0
  │   └── cross-spawn 5.1.0
  └─┬ bin-version-check 5.1.0
    └─┬ bin-version 6.0.0
      └─┬ execa 5.1.1
        └── cross-spawn 7.0.3
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

1 participant