search

mhevery / jasmine-node

Integration of Jasmine Spec framework with Node.js
MIT License
1.52k stars 292 forks source link

Vulnerability in dependency underscore #447

Open lkreimann opened 2 years ago

lkreimann commented 2 years ago

Dear maintainers,

currently there's a vulnerability in the dependency underscore in the version 1.9.x locked in this projects package.json. You can find more details here: https://github.com/advisories/GHSA-cf4h-3jhx-xvhq

Please update underscore to version 1.12.1 or higher.

MakakWasTaken commented 1 year ago

448 Fixes this error