meteorlxy / vue-showdown

:page_with_curl: Use showdown as a vue component
https://vue-showdown.js.org
MIT License
129 stars 23 forks source link

Vue2 vue-showdown 2.4.1 security vulnerability detected via ansi-regex : 4.1.0 #42

Closed dschmittwilken closed 2 years ago

dschmittwilken commented 2 years ago

Description

I just wanted to report a security issue with latest Vue2 version "vue-showdown 2.4.1". Perhaps it is sufficient to update ansi-regex dependent package to 5.0.1 to close this issue.

Reproduction

empty

Used Package Manager

npm

System Info

I just wanted to report a security issue with latest Vue2 version "vue-showdown 2.4.1". Perhaps it is sufficient to update ansi-regex dependent package to 5.0.1 to close this issue.

image

dschmittwilken commented 2 years ago

ansi regex 4.1.1 has no security issue