Current version of svg dependency has vulnerabilities

airbnb / babel-plugin-inline-react-svg

A babel plugin that optimizes and inlines SVGs for your React Components.

MIT License

473 stars 92 forks source link

Current version of svg dependency has vulnerabilities #98

Closed WilsonZheng closed 3 years ago

WilsonZheng commented 3 years ago

Project still using old version of svg dependency which has high and moderate vulnerabilities because of the old version of js-yaml that svg depends on. Any chance updating the svg version?

ljharb commented 3 years ago

No, a) the vulnerability simply doesn't apply to this package, b) duplicate of #45; see #34, #35.

Duplicate of #90. Duplicate of #83. Duplicate of #80. Duplicate of #75. Duplicate of #73. Duplicate of #69.