search

nhn / tui.image-editor

🍞🎨 Full-featured photo image editor using canvas. It is really easy, and it comes with great filters.
http://ui.toast.com/tui-image-editor
MIT License
6.83k stars 1.26k forks source link

Vulnerable dependencies found in latest version #922

Open sakshibatra16 opened 4 weeks ago

sakshibatra16 commented 4 weeks ago

Describe the bug Package is using old versions of child dependencies, which have vulnerability of very high severity. One of the package is tough-cookie whose version used is V3.0.1 which is vulnerable , and Its minimum version that needs to be upgraded is to V4.1.3

To Reproduce Steps to reproduce the behavior:

  1. Install the npm package
  2. Observe the package-lock.json file with the child dependencies.
  3. Getting vulnerable versions of child dependencies.

Expected behavior Latest or package with no vulnerability should be used.

Screenshots

Vulnerability

Additional context We are using this package from long time, due to this vulnerability in this package we have to remove this package and find an alternative, if this issue is not fixed.