search

bholloway / resolve-url-loader

Webpack loader that resolves relative paths in url() statements based on the original source file
565 stars 69 forks source link

V4 postcss vulnerability #238

Open jeran-urban opened 7 months ago

jeran-urban commented 7 months ago

hello,

the postcss package has vulnerabilities below version 8.4.31, is there anyway that you can update the dependency for postcss from ^7.0.35 to ^8.4.31 and backport that to create a v 4.0.1? Any help would be much appreciated. Thank you.

jeran-urban commented 7 months ago

current workaround in package.json:

"overrides": {
    "resolve-url-loader":{
      "postcss": "^8.4.31"
    }
  }
mdmahendri commented 1 month ago

found this issue through the usage of react-scripts the number of vulnerabilities goes up out of nowhere and it looks like Create React App is abbandoned