search

uniquker / vue3-quill-editor-vite

Quill editor component for Vue3, Custom image upload
3 stars 1 forks source link

npm audit has two moderate vulnerabilities #1

Open psapphire opened 1 year ago

psapphire commented 1 year ago

quill <=1.3.7 Severity: moderate Reverse Tabnabbing in quill - https://github.com/advisories/GHSA-588m-9qg5-35pq Cross-site Scripting in quill - https://github.com/advisories/GHSA-4943-9vgg-gr5r No fix available node_modules/quill vue3-quill-editor-vite * Depends on vulnerable versions of quill node_modules/vue3-quill-editor-vite

2 moderate severity vulnerabilities

Is it possible to update quill as dependency from 1.3.6 to 1.3.7 , please?

psapphire commented 1 year ago

There is a console.log() left in QuillEditor.tsx need to be removed.