"live-server": 1.2.1 references to "chokidar": "^2.0.4" which contains "glob-parent": "^3.1.0"

tapio / live-server

A simple development http server with live reload capability.

http://tapiov.net/live-server/

4.4k stars 484 forks source link

Open VladimirTrunov opened 2 years ago

VladimirTrunov commented 2 years ago

Hello everyone,

For "glob-parent" of version "^3.1.0" there is a vulnerability generated: CVE-2020-28469

This vulnerability will be fixed for "live-server" if the related "chokidar" will be updated to at least "^3.0.0"

Could anybody please take a look?

Thanks, -Vladimir