Closed Sandakan closed 2 years ago
Work around if on npm v8.3.0+ using overrides
"overrides": {
"node-vibrant": {
"@vibrant/image-node": {
"@jimp/types": {
"@jimp/jpeg": {
"jpeg-js": "^0.4.4"
}
}
}
}
}
@confuser Thanks for the help. It fixed the vulnerability. 😁😁
A new security vulnerability "Infinite loop in jpeg-js" with high-level severity in one of the package's dependencies has been detected. Most probably, every version of node-vibrant could be affected.