search

ricokahler / next-plugin-preval

Pre-evaluate async functions during builds and import them like JSON
MIT License
255 stars 12 forks source link

Upgrade babel-plugin-module-resolver dependency to fix High vulnerability #110

Open getellez opened 1 year ago

getellez commented 1 year ago

High vulnerability found

Running the command yarn audit --level high I found the next vulnerability

Prototype Pollution in JSON5 via Parse Method

Path: next-plugin-preval > babel-plugin-module-resolver > find-babel-config > json5

If babel-plugin-module-resolver package is upgraded to its latest version this vulnerability is fixed

image