search

dc-js / dc.js

Multi-Dimensional charting built to work natively with crossfilter rendered with d3.js
Apache License 2.0
7.41k stars 1.81k forks source link

vulnerability: d3-color:2.0.0: 1084597(10.0) #1871

Open masterismet opened 1 year ago

masterismet commented 1 year ago

dc(4.2.7) using d3(6.6.2) as required dependency , d3 has d3-color:2.0.0 vulnerability, it needs to update latest d3 version https://github.com/advisories/GHSA-36jr-mh4h-2g58

"dc": { "version": "4.2.7", "resolved": "https://registry.npmjs.org/dc/-/dc-4.2.7.tgz", "integrity": "sha512-83vzVpBmXFCW7V2uVhBolcPX22d19k4GV7zJWu8jkyNhMstAb/XYl2Eld3Kp71eLD8YM9RsIRgtrmLViQeZTuQ==", "requires": { "d3": "^6.6.2" }, .... }