search

bpampuch / pdfmake

Client/server side PDF printing in pure JavaScript
http://pdfmake.org
Other
11.44k stars 2.02k forks source link

Vulnerability SNYK-JS-ES5EXT-6095076 in es5-ext #2701

Closed corzelito closed 3 months ago

corzelito commented 3 months ago

Link in snyk: https://security.snyk.io/vuln/SNYK-JS-ES5EXT-6095076

liborm85 commented 3 months ago

es5-ext is part of brfs. brfs package is unused in pdfmake (only installed).

Removed brfs dependency in version 0.2.10.

corzelito commented 3 months ago

es5-ext is part of brfs. brfs package is unused in pdfmake (only installed).

Removed brfs dependency in version 0.2.10.

Thanks mate!

keithernet commented 6 days ago

Hello! It looks like the brfs dependency is still in the package.json file which is causing my SCA to pick up the vulnerability still. Can it be removed? Happy to add the PR if there's not some reason it still needs to be in the devDeps.

Thanks!