search

garycourt / uri-js

An RFC 3986 compliant, scheme extendable URI parsing/validating/normalizing/resolving library for JavaScript
Other
305 stars 68 forks source link

Package Vulnerability: minimatch:3.0.4 #83

Open oliviercperrier opened 1 year ago

oliviercperrier commented 1 year ago

Hi,

there is currently a security vulnerability in minimatch:3.0.4 (https://github.com/advisories/GHSA-f8q6-p94x-37v3)

I've noticed that the last version on uri-js (4.4.1) is still using minimatch:3.0.4.

This vulnerability is fixed in minimatch:3.0.5 or greater. Last verison is 5.1.1

Thanks