Set-Value 3.0.3 dependency has CVE-2021-23440

pnp / generator-teams

A Yeoman Generator for Microsoft Teams

https://pnp.github.io/generator-teams

MIT License

424 stars 111 forks source link

Set-Value 3.0.3 dependency has CVE-2021-23440 #361

Closed rich2099 closed 1 year ago

rich2099 commented 1 year ago

Hi,

The dependency set-value-3.0.3.tgz is blocked within my company due CVE-2021-23440.
Has this been mentioned before and can we install a newer version and skip 3.0.3 installation?

rich2099 commented 1 year ago

Sorry i realize this is gulp that has this dependency. I'll close this issue.