package low vulnerability

secretyouth / react-datez

An easy to use, customizable mobile-friendly datepicker.

MIT License

126 stars 24 forks source link

package low vulnerability #59

Open subhisamara opened 4 years ago

subhisamara commented 4 years ago

Low Denial of Service

Package node-fetch

Patched in >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9

Dependency of react-datez

Path react-datez > react > fbjs > isomorphic-fetch > node-fetch
Path react-datez > react-addons-shallow-compare > fbjs >
isomorphic-fetch > node-fetch
Path react-datez > react-dom > fbjs > isomorphic-fetch >
node-fetch