search

gruntjs / grunt-contrib-jasmine

Run jasmine specs headlessly through Headless Chrome
http://gruntjs.com/
MIT License
354 stars 197 forks source link

Puppeteer 19 has dependencies on packages with security problems. #369

Open morganwahl opened 3 months ago

morganwahl commented 3 months ago

Hi! Puppeteer depends on ws, which has a security issue in version 8.0.0 - 8.17.1. https://nvd.nist.gov/vuln/detail/CVE-2024-37890 . Puppeteer updated their dependencies in version 22.11.2 https://github.com/puppeteer/puppeteer/releases/tag/puppeteer-core-v22.11.2 . Please update your dependency on puppeteer.