Vulnerability about glob-parent

serverless / serverless-plugin-typescript

Serverless plugin for zero-config Typescript support

MIT License

783 stars 223 forks source link

Vulnerability about glob-parent #244

Closed matsutake-eg closed 3 years ago

matsutake-eg commented 3 years ago

Hello! I love using this plugin.

Sadly, I found vulnerability about glob-parent. https://github.com/advisories/GHSA-ww39-953v-wcq6

Is there good way for everyone to use this plugin safety?

T4ze commented 3 years ago

It seems that there is already a PR (#153) from 2019 relative to this subject and should fix the issue. @medikoo It would really be nice if this could be rebased and merged to fix vulnerability issues.

medikoo commented 3 years ago

@T4ze thanks for pinging. We've just released v2.0.0 of a plugin that comes with upgraded globby

matsutake-eg commented 3 years ago

Thank you @T4ze and @medikoo for your help. I will continue to use it in the future!