loader-utils has security risks

vercel / styled-jsx

Full CSS support for JSX without compromises

http://npmjs.com/styled-jsx

MIT License

7.65k stars 266 forks source link

Closed zakiFaner closed 2 months ago

zakiFaner commented 4 months ago

hello, I found that the npm package 'loader-utils' that the project relies on has security risks. Can I upgrade it to the safe version? https://github.com/advisories/GHSA-3rfm-jhwj-7488

github-actions[bot] commented 2 months ago

:tada: This issue has been resolved in version 5.1.3 :tada:

The release is available on:

Your semantic-release bot :package::rocket: