Closed spowell-216 closed 2 years ago
@bentley/itwin-client package has a dependency on "xmldom": "^0.6.0"
"xmldom": "^0.6.0"
per the security advisory Misinterpretation of malicious XML input
could we get this package updated to "@xmldom/xmldom":"^0.7.0"
"@xmldom/xmldom":"^0.7.0"
Should be fixed in 2.19.12, which is now available.
@bentley/itwin-client package has a dependency on
"xmldom": "^0.6.0"
per the security advisory Misinterpretation of malicious XML input
could we get this package updated to
"@xmldom/xmldom":"^0.7.0"