textlint-rule / textlint-rule-date-weekday-mismatch

textlint rule that found mismatch between date and weekday.
MIT License
10 stars 4 forks source link

Update dependency of chrono-node to v2.2.4 or higher due to CVE-2021-23371 #1

Open gecko655 opened 3 years ago

gecko655 commented 3 years ago

chrono-node CVE-2021-23371: https://snyk.io/vuln/SNYK-JS-CHRONONODE-1083228

I would like to update chrono-node to v2.2.4 or higher, due to a vulnerability about a DoS attack issue.

Chrono-node v2 has breaking changes, which is critical for this textlint rule.

For Users

  • Chrono’s default now handles only international English. While in the previous version, it tried to parse with all known languages.
  • The current fully supported languages are en, ja, and fr (de and pt are partially supported). Other languages from v1 (nl and zh) are under development. https://github.com/wanasit/chrono#whats-changed-in-the-v2

So, following things have to be done to update chrono-node to v2.x:

(If you find it's not necessary, it's fine to just close this issue.) (一旦Issueを立てましたが、必要ないようであればそのまま閉じていただいて構いません。)

azu commented 3 years ago

Thanks for the report! We need to update the module

tyler36 commented 1 year ago

Any progress on this?

tyler36 commented 11 months ago

Started PR #13 but I am stuck.

azu commented 11 months ago

Thanks. I'll look it in weekend.