Security vulnerability - nth-check dependency

damianstasik / vue-svg-loader

🔨 webpack loader that lets you use SVG files as Vue components

https://vue-svg-loader.js.org

MIT License

645 stars 86 forks source link

Open gablittledevshop opened 2 years ago

gablittledevshop commented 2 years ago

Running npm audit in my project reveals a vulnerability with the nth-check dependency https://github.com/advisories/GHSA-rp65-9cf3-cjxr . This seems to be resolved already in other dependencies, css-stream https://github.com/fb55/css-select/issues/607, but not with svg-to-vue.

frankykubo commented 2 years ago

Yeah, it would be very nice if maintainer resolved this. However it looks like that this project is not maintained anymore.