search

bholloway / resolve-url-loader

Webpack loader that resolves relative paths in url() statements based on the original source file
563 stars 71 forks source link

Loader utils should be at least version 2.0.4 #237

Open aseques opened 3 months ago

aseques commented 3 months ago

There's a bug considered critical (9.8 CVE-2022-37601) in loader-utils 2.0.2 that has been fixed some time ago url In the package.json the required version in ^2.0.0, this should be changed to ^2.0.4 so it would pull the version with the required fixes.

The affected line:

https://github.com/bholloway/resolve-url-loader/blob/e2695cde68f325f617825e168173df92236efb93/packages/resolve-url-loader/package.json#L40