Closed fluse closed 5 years ago
Can someone please fix it!?
I found this documentation on the npm website but I have no clue how to do that but maybe someone else does:
Update dependent packages if a fix exists§
If a fix exists but packages that depend on the package with the vulnerability have not been updated to include the fixed version, you may want to open a pull or merge request on the dependent package repository to use the fixed version.
Resolved by #142
High │ Cross-Site Scripting │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ handlebars │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=4.0.0 │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Dependency of │ grunt-svgstore [dev] │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Path │ grunt-svgstore > handlebars │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ More info │ https://nodesecurity.io/advisories/61