storybookjs / addon-postcss

This Storybook addon can be used to run the PostCSS preprocessor against your stories.
MIT License
20 stars 22 forks source link

Vulnerability on @storybook/addon-postcss via postcss <8.2.10 #25

Open josephemswiler opened 3 years ago

josephemswiler commented 3 years ago

On @storybook/addon-postcss@v2.0.0 - Regular Expression Denial of Service vulnerability via postcss per https://www.npmjs.com/advisories/1693 - patched in >=8.2.10.

Is it possible for y'all to update your postcss dependency to remove this vulnerability?