search

imagemin / imagemin-svgo

SVGO plugin for imagemin
MIT License
125 stars 28 forks source link

Update svgo dependency to 1.2.2 to fix js-yaml vulnerability #37

Closed remideneleaodocs closed 4 years ago

remideneleaodocs commented 5 years ago

svgo 1.2.2 fixes the js-yaml < 3.13.1 vulnerability.

Can you update svgo from 1.0.5 to 1.2.2 in package.json?

tyrann0us commented 4 years ago

As of February 19 2020, the latest SVGO version is 1.3.2, see https://github.com/svg/svgo/releases. @bensampaio, can you refresh your PR (#38)?

@sindresorhus, @kevva, it would be great if you could take care of this request. Thanks!