Gulp-cli 2.3.0 using vulnerable version of copy-props 2.0.1

gulpjs / gulp-cli

Command Line Interface for gulp.

MIT License

401 stars 106 forks source link

Gulp-cli 2.3.0 using vulnerable version of copy-props 2.0.1 #236

Closed HarishAchu closed 2 years ago

HarishAchu commented 2 years ago

We are using Gulp-cli and we see that it uses a vulnerable version of copy-props, the version <2.0.5 is open for vulnerabilities and it is fixed. The latest version of copy-props is 3.0.1.

Reference: https://snyk.io/vuln/npm:copy-props

Please advise whether there is any patched version with the copy-props fixes that we can upgrade to.

Thanks !