search

TanStack / react-charts

⚛️ Simple, immersive & interactive charts for React
https://react-charts.tanstack.com
MIT License
2.98k stars 243 forks source link

Fix dependency vulnerability d3-color < 3.1.0 #328

Open j3r3myp1pp3n opened 1 year ago

j3r3myp1pp3n commented 1 year ago

Wanted to share a recently discovered vulnerability, showing as High in npm audit.

d3-color vulnerable to ReDoS Patched in >=3.1.0 Path: react-charts > d3-scale > d3-interpolate > d3-color

image

huyphams commented 1 year ago

Hi @tannerlinsley it would be great if you could update it, thank you for the awesome charts.

amitnyc83 commented 9 months ago

Hi there, I am using dx-react-charts as a dependency which has a dependency on d3-color just like the screenshot above. Do i just add d3-color v3.1.0 as a peerDependency to fix this issue. Thanks in advance!