js-yaml security vulnerability

Mevrael / bunny

BunnyJS - Lightweight native (vanilla) JavaScript (JS) and ECMAScript 6 (ES6) browser library, package of small stand-alone components without dependencies: FormData, upload, image preview, HTML5 validation, Autocomplete, Dropdown, Calendar, Datepicker, Ajax, Datatable, Pagination, URL, Template engine, Element positioning, smooth scrolling, routing, inversion of control and more. Simple syntax and architecture. Next generation jQuery and front-end framework. Documentation and examples available.

https://bunnyjs.com

MIT License

487 stars 39 forks source link

js-yaml security vulnerability #34

Closed NHKK closed 5 years ago

NHKK commented 5 years ago

Please update the dependencies as it is bringing in a vulnerable version of js-yaml. I'm not sure how to fix.

Mevrael commented 5 years ago

I have updated assets-builder dependencies and also removed assets-builder from bunnyjs dependencies so it would install BunnyJS itself faster.

Please update bunnyjs to 0.14.42 and let me know if you still will have any issues.

NHKK commented 5 years ago

Thanks it works