google / blockly

The web-based visual programming editor.
https://developers.google.com/blockly/
Apache License 2.0
12.51k stars 3.72k forks source link

CVE-2024-37890 in jsdom peer dependency #8644

Closed antoninmeunier closed 2 weeks ago

antoninmeunier commented 2 weeks ago

Check for duplicates

Description

Hello,

We found a CVE with code : [CVE-2024-37890] in the ws package which is a peer of jsdom.

[blockly @ 11.1.1] -> [jsdom @ 23.0.0] ->[ws @ 8.17.0]

Thanks for looking at it

Reproduction steps

Stack trace

No response

Screenshots

No response

Browsers

No response

gonfunko commented 2 weeks ago

Duplicate of #8244