search

jaredpalmer / cypress-image-snapshot

Catch visual regressions in Cypress
MIT License
882 stars 160 forks source link

Please upgrade term-img due to xmldom security issue #237

Open PepijnSenders opened 2 years ago

PepijnSenders commented 2 years ago

This is the dependency tree of your package:

└─ app@workspace:app
   └─ cypress-image-snapshot@npm:4.0.1 [e7565] (via npm:^4.0.1 [e7565])
      └─ term-img@npm:4.1.0 (via npm:^4.0.0)
         └─ iterm2-version@npm:4.2.0 (via npm:^4.1.0)
            └─ plist@npm:3.0.1 (via npm:^3.0.1)
               └─ xmldom@npm:0.1.31 (via npm:0.1.x)

term-img@5 doesn't need xmldom@0 which has open security issues: https://mattermost.com/blog/securing-xml-implementations-across-the-web/