nostalgic-css / NES.css

NES-style CSS Framework | ファミコン風CSSフレームワーク
https://nostalgic-css.github.io/NES.css/
MIT License
20.47k stars 1.64k forks source link

Bump fsevents from 1.2.7 to 1.2.13 to resolve CVE-2023-45311 #504

Closed Zosoled closed 5 months ago

Zosoled commented 5 months ago

Bumps fsevents from 1.2.7 to 1.2.13.


updated-dependencies:

Description fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes code that was obtained from that URL at a time when it was controlled by an adversary.