search

elrumordelaluz / outline-stroke

Convert stroked SVG into the outlined version
https://outline-stroke.vercel.app/
126 stars 7 forks source link

Update dependency @lovell/sharp: use version ^0.30.5 #19

Open JeroenRoodIHS opened 1 year ago

JeroenRoodIHS commented 1 year ago

For dependency @lovell/sharp, a vulnerability was found: https://github.com/advisories/GHSA-gp95-ppv5-3jc5

The vulnerability concerned Command Injection in post-installation over build environment. This was fixed in version v0.30.5

Updating Sharp to v0.30.5 should remove the vulnerability, or at least, that's what it says on the tin.

elrumordelaluz commented 1 year ago

Hi @JeroenRoodIHS , thanks for open the Issue.

Mind creating a PR? Thanks!