search

nuxt-modules / svg-sprite

Optimize SVG files and combine them into sprite
https://codesandbox.io/s/github/nuxt-community/svg-sprite-module/
MIT License
295 stars 41 forks source link

Update dependencies svgo [CVE-2021-3803] #279

Closed BulatSa closed 1 year ago

BulatSa commented 1 year ago

Hello, update please dependencies svgo, this version has vulnarabilities of nth-check@1.0.2

image

https://avd.aquasec.com/nvd/2021/cve-2021-3803/

AlonNavon commented 1 year ago

Hey @BulatSa,

We're part of a startup called Seal Security that mitigates software vulnerabilities in older open source versions by backporting/creating standalone security patches - enabling more straightforward remediation in cases like this. We created an nth-check 1.02-sp1 that's vulnerability-free. As with all of our patches, it's open-source and available for free.

If relevant, check out our GitHub repo if you wish to learn more, or start using our app.

Please feel free to reach us at info@seal.security if you have any requests/questions.

harlan-zw commented 1 year ago

Seems like this is sorted with the v1